https://community.splunk.com/t5/Splunk-Search/How-to-extract-data-from-event/m-p/130056#M35390 <P>Thank you!!!! <span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:">😄</span></P> Fri, 29 May 2015 15:33:26 GMT mrchariybrown 2015-05-29T15:33:26Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-data-from-event/m-p/130054#M35388 <P>I have a bunch of events and within the events, I have the following:</P> <P>"Back Garage took Time In MilliSeconds: 1621 In Seconds ::1 to refresh the Image"</P> <P>I need to extract the "1621" (milliseconds) from the event raw data.</P> <P>And then I need to put in into a line graph in splunk.</P> <P>I'm obviously very new to this but I was asked to help on this from a manager.</P> <P>Please help~</P> Thu, 28 May 2015 19:12:00 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-data-from-event/m-p/130054#M35388 mrchariybrown 2015-05-28T19:12:00Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-data-from-event/m-p/130055#M35389 <PRE><CODE>|rex field=_raw "MilliSeconds:\s(?&lt;myvalue&gt;\d+)\s"|table myvalue </CODE></PRE> Thu, 28 May 2015 19:26:21 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-data-from-event/m-p/130055#M35389 aalanisr26 2015-05-28T19:26:21Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-data-from-event/m-p/130056#M35390 <P>Thank you!!!! <span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:">😄</span></P> Fri, 29 May 2015 15:33:26 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-data-from-event/m-p/130056#M35390 mrchariybrown 2015-05-29T15:33:26Z