<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How can i create a table to show all the values from the below log lines. in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-table-to-show-all-the-values-from-the-below-log/m-p/600129#M208914</link>
    <description>&lt;LI-CODE lang="markup"&gt;| rex "MyId=(?&amp;lt;MyId&amp;gt;[^,]+).*sId=(?&amp;lt;sId&amp;gt;[^,]+).*Reports=(?&amp;lt;Reports&amp;gt;[^,]+)"
| rex max_match=0 "(?&amp;lt;set&amp;gt;url.*?Type.*?Available.*?Tag.*?Token\S+)"
| mvexpand set
| rex field=set "url=(?&amp;lt;url&amp;gt;[^,]+).*?Type=(?&amp;lt;Type&amp;gt;[^,]+).*?Available=(?&amp;lt;Available&amp;gt;[^,]+).*?Tag=(?&amp;lt;Tag&amp;gt;[^,]+).*?Token=(?&amp;lt;Token&amp;gt;\S+)"
| table MyId sId Reports url Type Available Tag Token&lt;/LI-CODE&gt;</description>
    <pubDate>Wed, 01 Jun 2022 16:58:40 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2022-06-01T16:58:40Z</dc:date>
    <item>
      <title>How to create a table to show all the values from the below log lines?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-table-to-show-all-the-values-from-the-below-log/m-p/600108#M208906</link>
      <description>&lt;P&gt;&lt;SPAN class=""&gt;Log Lines are as given below&lt;BR /&gt;&lt;BR /&gt;Reports&lt;/SPAN&gt; &lt;SPAN class=""&gt;obtained&lt;/SPAN&gt;&lt;SPAN class=""&gt;.&lt;/SPAN&gt; &lt;SPAN class=""&gt;MyId=NameOne&lt;/SPAN&gt;&lt;SPAN&gt;, s&lt;/SPAN&gt;&lt;SPAN class=""&gt;Id=s0&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Reports=true&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;&lt;SPAN class=""&gt;LogString&lt;/SPAN&gt;=&lt;/SPAN&gt; &lt;SPAN class=""&gt;url=status.com&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Type=base&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Available=true&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Tag=112434&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Token=2356&lt;/SPAN&gt; &lt;SPAN class=""&gt;url=status2.com&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Type=error&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Available=false&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Tag=12345&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;Token=23567&lt;BR /&gt;&lt;BR /&gt;Reports obtained. MyId=NameTwo&lt;SPAN&gt;, s&lt;/SPAN&gt;Id=s1&lt;SPAN&gt;, &lt;/SPAN&gt;Reports=true&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN class=""&gt;LogString&lt;/SPAN&gt;= url=status3.com&lt;SPAN&gt;, &lt;/SPAN&gt;Type=base&lt;SPAN&gt;, &lt;/SPAN&gt;Available=true&lt;SPAN&gt;, &lt;/SPAN&gt;Tag=12345876&lt;SPAN&gt;, &lt;/SPAN&gt;Token=2356&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;I want to create a table as below&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;TABLE border="1" width="100%"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;MyId&amp;nbsp;&lt;/TD&gt;
&lt;TD width="7.142857142857143%" height="25px"&gt;sId&lt;/TD&gt;
&lt;TD width="7.142857142857143%"&gt;Reports&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;url&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;Type&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;Available&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;Tag&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;Token&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;NameOne&amp;nbsp; &lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="7.142857142857143%" height="25px"&gt;s0&lt;/TD&gt;
&lt;TD width="7.142857142857143%"&gt;true&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;status.com&lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;base&lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;true&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;112434&lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;2356&lt;/SPAN&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;NameOne&amp;nbsp; &lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="7.142857142857143%" height="25px"&gt;s0&lt;/TD&gt;
&lt;TD width="7.142857142857143%"&gt;true&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;status2.com&lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;error&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;false&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;12345&lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;23567&lt;/SPAN&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;NameTwo&amp;nbsp; &lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="7.142857142857143%" height="25px"&gt;s1&lt;/TD&gt;
&lt;TD width="7.142857142857143%"&gt;true&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;status3.com&lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;base&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;true&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;12345876&lt;/SPAN&gt;&lt;/TD&gt;
&lt;TD width="14.285714285714286%" height="25px"&gt;&lt;SPAN class=""&gt;2356&lt;/SPAN&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;P&gt;&lt;SPAN class=""&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Jun 2022 17:02:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-table-to-show-all-the-values-from-the-below-log/m-p/600108#M208906</guid>
      <dc:creator>olilloyd</dc:creator>
      <dc:date>2022-06-01T17:02:13Z</dc:date>
    </item>
    <item>
      <title>Re: How can i create a table to show all the values from the below log lines.</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-table-to-show-all-the-values-from-the-below-log/m-p/600129#M208914</link>
      <description>&lt;LI-CODE lang="markup"&gt;| rex "MyId=(?&amp;lt;MyId&amp;gt;[^,]+).*sId=(?&amp;lt;sId&amp;gt;[^,]+).*Reports=(?&amp;lt;Reports&amp;gt;[^,]+)"
| rex max_match=0 "(?&amp;lt;set&amp;gt;url.*?Type.*?Available.*?Tag.*?Token\S+)"
| mvexpand set
| rex field=set "url=(?&amp;lt;url&amp;gt;[^,]+).*?Type=(?&amp;lt;Type&amp;gt;[^,]+).*?Available=(?&amp;lt;Available&amp;gt;[^,]+).*?Tag=(?&amp;lt;Tag&amp;gt;[^,]+).*?Token=(?&amp;lt;Token&amp;gt;\S+)"
| table MyId sId Reports url Type Available Tag Token&lt;/LI-CODE&gt;</description>
      <pubDate>Wed, 01 Jun 2022 16:58:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-table-to-show-all-the-values-from-the-below-log/m-p/600129#M208914</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-06-01T16:58:40Z</dc:date>
    </item>
  </channel>
</rss>

