topic Re: Extracting BUILDING value using rex in Dashboards & Visualizations

Extracting BUILDING value using rex

sgulhane5 — Tue, 29 Sep 2020 12:11:50 GMT

Hi Team,

I've below extensible attributes in message tab, able to extract Assignor ID and it's Value but facing issue for BUILDING and It's Value. I guess because value is under special characters i.e. ["NOI_SEC60_GF"]]

network_view=default extensible_attributes=[[name="Assignor ID",value="51806153"],[name="BUILDING",value=["NOI_SEC60_GF"]]

I tried few solution but it's not working. @MuS

Thanks,

Re: Extracting BUILDING value using rex

ITWhisperer — Tue, 29 Sep 2020 12:20:11 GMT

What have you tried already? If you are using rex and matching against "name" and "value", are you using max_match=0 to get more than one match?

Re: Extracting BUILDING value using rex

sgulhane5 — Tue, 29 Sep 2020 13:04:13 GMT

I tried below command

|rex max_match=0 field=_raw "BUILDING\",value=\"(?<Building>.*?)\s*(\w*+)\]"| eval Building= substr(Building, 1, len(Building)-1)|

Re: Extracting BUILDING value using rex

ITWhisperer — Tue, 29 Sep 2020 13:11:34 GMT

|rex max_match=0 field=_raw "BUILDING\",value=\[\"(?<Building>[^\"]*)\"\]"

Re: Extracting BUILDING value using rex

sgulhane5 — Wed, 14 Oct 2020 13:31:51 GMT

Thanks, @ITWhisperer

Re: Extracting BUILDING value using rex

sgulhane5 — Tue, 20 Oct 2020 23:36:45 GMT

Thanks a lot @ITWhisperer