Hi 👋
If I have below sample message how can I extract procedure names from it, I'm pretty new to splunk any help or guidance would be great.
I would like to extract the highlighted message.
...lib.service.exc.ServiceHTTPError: service=svysvc_v2 url=http://x-vip/v2/sys/505019269 http_status=500 error={"code":500,"status":500,"error":{"service":null,"reason":"Unhandled exception","type":"unhandled-exception","error":"OperationalError: (pymssql._pymssql.OperationalError) (10316, b'The app domain with specified version id (84271) was unloaded due to memory pressure and could not be found.DB-Lib error message 20018, severity 16:\\nGeneral SQL Server error: Check messages from the SQL Server\\n')\n[SQL: \n \n \n EXEC Database01.dbo.Procedure01\n @ids=%(ids)s,@den(den)s,@Visible=(visible)s;\n ...
I'm trying to extract all the failed procedures from the error logs and get the counts by each procedure.
Thank you
It is not clear which part of the message you are interested in.
Can you share the complete event?
Do you already have some fields extracted for the events?