topic How to extract fields from logs using rex. in Splunk Search

topic How to extract fields from logs using rex. in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-extract-fields-from-logs-using-rex/m-p/657721#M227158 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="avi7326_0-1694780649124.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/27198i71314EFD77D46D68/image-size/medium?v=v2&px=400" role="button" title="avi7326_0-1694780649124.png" alt="avi7326_0-1694780649124.png" /></span></P><P>How to extract fields which comes under message and failedRecords.</P> Fri, 15 Sep 2023 12:28:50 GMT avi7326 2023-09-15T12:28:50Z How to extract fields from logs using rex. https://community.splunk.com/t5/Splunk-Search/How-to-extract-fields-from-logs-using-rex/m-p/657721#M227158 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="avi7326_0-1694780649124.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/27198i71314EFD77D46D68/image-size/medium?v=v2&px=400" role="button" title="avi7326_0-1694780649124.png" alt="avi7326_0-1694780649124.png" /></span></P><P>How to extract fields which comes under message and failedRecords.</P> Fri, 15 Sep 2023 12:28:50 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-fields-from-logs-using-rex/m-p/657721#M227158 avi7326 2023-09-15T12:28:50Z Re: How to extract fields from logs using rex. https://community.splunk.com/t5/Splunk-Search/How-to-extract-fields-from-logs-using-rex/m-p/657722#M227159 <P>For JSON data, use spath command. <BR />Reference:<BR /><A href="https://community.splunk.com/t5/Splunk-Search/How-to-parse-my-JSON-data-with-spath-and-table-the-data/m-p/250462" target="_blank">https://community.splunk.com/t5/Splunk-Search/How-to-parse-my-JSON-data-with-spath-and-table-the-data/m-p/250462</A><BR /><BR /><A href="https://kinneygroup.com/blog/splunk-spath-command/" target="_blank">https://kinneygroup.com/blog/splunk-spath-command/</A><BR /><BR /></P> Fri, 15 Sep 2023 12:53:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-fields-from-logs-using-rex/m-p/657722#M227159 neerajs_81 2023-09-15T12:53:17Z