How to remove ** using regex in field extraction

reach2tushar — Tue, 10 Jun 2014 14:25:48 GMT

Hi,

I have to do field extraction on the following data.

****2014/02/02 10:10:10 level - test

Can please help to get the regex to extract fields:
Date = 2014/02/02
Time = 10:10:10
Level = level
Message = Text

Your help is greatly appreciated.

Re: How to remove ** using regex in field extraction

richgalloway — Tue, 10 Jun 2014 15:39:46 GMT

This works with your example event on RegExr:

(?<Date>\d{4}\/\d{2}\/\d{2})\s(?<Time>\d{2}:\d{2}:\d{2})\s(?<Level>\S*)\s-\s(?<Message>[\s\S]*)