I have set of machine data. When i am trying to extract using field extract i am getting this error.
Note: This regex already extracts for scriptfile_sourcetype and for scriptfile_sourcetype.
Can you anyone please tell me where i am going wrong.
Yes Ayn but i am not able to extract some of the fields but i m not able to extract last string of the event.
*Noofrenewalnoticesent=1 Channel=Direct Claim=No Policy_Degrade_Upgrade=Degraded Upgarded_degraded_amount=8 Underwriting_AUTO_MAN=Manually MAN175 Underwriting_Time=23 REASON024 *
i want to extract REASONo24 how can i do this?