How to parse the events

zacksoft — Tue, 29 Sep 2020 19:55:17 GMT

Above is how one of my sample events look like.
I need help in parsing the events so that the output should look like in a table format like the following with four columns Target,Status,Current_Conns, Total_Connection fetched from the event.

Target Status Current_Conns Total_Connection
31.129.119.201:8443 Forced down 0 902
31.129.118.245:8343 Pool member is available 213
30.128.179.243:8343 Pool member is available 0
30.128.209.65:8343 Pool member is available 211
30.128.409.66:7443 Pool member is available 216
30.128.209.67:7343 Pool member is available 247

Re: How to parse the events

adonio — Wed, 06 Jun 2018 12:15:33 GMT

try this out,
| extract pairdelim="|", kvdelim=":"
did not test it yet ...
or maybe use rex

Re: How to parse the events

zacksoft — Wed, 06 Jun 2018 12:58:50 GMT

Thanks, I'll try your suggestion.

topic How to parse the events in Getting Data In

How to parse the events

Re: How to parse the events

Re: How to parse the events