topic How to Extract a field from raw data in Dashboards & Visualizations https://community.splunk.com/t5/Dashboards-Visualizations/How-to-Extract-a-field-from-raw-data/m-p/550784#M38055 <P>How can I extract the below field from raw:</P><P><SPAN class="t a"><SPAN class="t">The</SPAN> <SPAN class="t">Total</SPAN> <SPAN class="t">Process</SPAN> <SPAN class="t">Time</SPAN></SPAN> <SPAN class="t">to</SPAN> <SPAN class="t">publish</SPAN> <SPAN class="t">in</SPAN> <SPAN class="t">Kafka</SPAN> <SPAN class="t">topic</SPAN> <SPAN class="t">is</SPAN><SPAN> (</SPAN><SPAN class="t">milli-sec</SPAN><SPAN>)</SPAN><SPAN class="t h">=<STRONG>5</STRONG></SPAN></P><P><SPAN class="t h"><SPAN class="t a"><SPAN class="t">The</SPAN> <SPAN class="t">Total</SPAN> <SPAN class="t">Process</SPAN> <SPAN class="t">Time</SPAN></SPAN>(<SPAN class="t">milli-sec</SPAN>)<SPAN class="t">=<STRONG>1</STRONG></SPAN></SPAN></P><P><SPAN class="t h"><SPAN class="t"><STRONG>I want to extarct 1 and 5.</STRONG></SPAN></SPAN></P><P><SPAN class="t h"><SPAN class="t"><STRONG>How can I fetch someone can guide me?</STRONG></SPAN></SPAN></P> Fri, 07 May 2021 10:54:31 GMT aditsss 2021-05-07T10:54:31Z How to Extract a field from raw data https://community.splunk.com/t5/Dashboards-Visualizations/How-to-Extract-a-field-from-raw-data/m-p/550784#M38055 <P>How can I extract the below field from raw:</P><P><SPAN class="t a"><SPAN class="t">The</SPAN> <SPAN class="t">Total</SPAN> <SPAN class="t">Process</SPAN> <SPAN class="t">Time</SPAN></SPAN> <SPAN class="t">to</SPAN> <SPAN class="t">publish</SPAN> <SPAN class="t">in</SPAN> <SPAN class="t">Kafka</SPAN> <SPAN class="t">topic</SPAN> <SPAN class="t">is</SPAN><SPAN> (</SPAN><SPAN class="t">milli-sec</SPAN><SPAN>)</SPAN><SPAN class="t h">=<STRONG>5</STRONG></SPAN></P><P><SPAN class="t h"><SPAN class="t a"><SPAN class="t">The</SPAN> <SPAN class="t">Total</SPAN> <SPAN class="t">Process</SPAN> <SPAN class="t">Time</SPAN></SPAN>(<SPAN class="t">milli-sec</SPAN>)<SPAN class="t">=<STRONG>1</STRONG></SPAN></SPAN></P><P><SPAN class="t h"><SPAN class="t"><STRONG>I want to extarct 1 and 5.</STRONG></SPAN></SPAN></P><P><SPAN class="t h"><SPAN class="t"><STRONG>How can I fetch someone can guide me?</STRONG></SPAN></SPAN></P> Fri, 07 May 2021 10:54:31 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-Extract-a-field-from-raw-data/m-p/550784#M38055 aditsss 2021-05-07T10:54:31Z Re: How to Extract a field from raw data https://community.splunk.com/t5/Dashboards-Visualizations/How-to-Extract-a-field-from-raw-data/m-p/550787#M38056 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225066">@aditsss</a>,</P><P>please try this regex</P><LI-CODE lang="markup">| rex "The Total Process Time[^\=]+\=(?&lt;time&gt;\d+)"</LI-CODE><P>that you can test at&nbsp;<A href="https://regex101.com/r/wDUp7E/1" target="_blank">https://regex101.com/r/wDUp7E/1</A></P><P>Ciao.</P><P>Giuseppe</P> Fri, 07 May 2021 11:02:53 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-Extract-a-field-from-raw-data/m-p/550787#M38056 gcusello 2021-05-07T11:02:53Z