topic Create a table in Dashboards & Visualizations

Create a table

chinhp — Sun, 16 Feb 2014 14:51:21 GMT

Hi I want to create a table for the below log entry

Feb 16 15:42:10 10.176.10.22 Feb 16 2014 14:42:10: %ASA-4-722051: Group User IP <36.XX.XX.116> Address <10.XX.xx.168> assigned to session

Fields :
Group = Group
User = User
PIP = <36.XX.XX.116>
LIP= <10.XX.xx.168>

Date,Time || Group || User || PIP || LIP

Re: Create a table

somesoni2 — Sun, 16 Feb 2014 18:21:15 GMT

Try this:

your base search | rex "Group\s\<(?<Group>[^\>]+)\>\sUser\s\<(?<User>[^\>]+)\>\sIP\s\<(?<PIP>[^\>]+)\>\sAddress\s\<(?<LIP>[^\>]+)\>" | rename _time as Date | table Date,Group,User,PIP,LIP

Re: Create a table

chinhp — Mon, 17 Feb 2014 07:19:30 GMT

awesome thanks this is working like charm

Re: Create a table

somesoni2 — Mon, 17 Feb 2014 17:21:03 GMT

Great... Please accept the answer if there are no followup questions.