Hi,
Below is an extract of the log data that I'd like to present in my dashboard. The purpose is to get a display of the total additions and total errors for each file - Activity.txt and Activit_XYZ.txt.
11/4/2022 7:30:00 AM Processing Task t1. Searching for D:\Box\FIL\Import\Activity\*.txt
11/4/2022 7:30:00 AM Processing D:\Box\FIL\Import\Activity\Activity.txt
11/4/2022 7:30:00 AM Deleted D:\Box\FIL\Import\Activity\Activity.txt
11/4/2022 7:30:00 AM Total Attempted Add's: 7
11/4/2022 7:30:00 AM Total Additions: 7
11/4/2022 7:30:00 AM Total Errors during Add: 0
11/4/2022 7:30:00 AM Last Transaction: 0
11/4/2022 7:30:00 AM Processing D:\Box\FIL\Import\Activity\Activity_XYZ.txt
11/4/2022 7:30:00 AM Deleted D:\Box\FIL\Import\Activity\Activity_XYZ.txt
11/4/2022 7:30:00 AM Total Attempted Add's: 17
11/4/2022 7:30:00 AM Total Additions: 17
11/4/2022 7:30:00 AM Total Errors during Add: 0
11/4/2022 7:30:00 AM Last Transaction: 0
I've created a script but this only displays the first instance of Total Additions and Total Errors, could you help me to display the second instance of the data.
To display Total Additions I use the script below;
host="VMXXX12" source="D:\\Box\\FIL\\Logs\\Pbsa\\Import Activity.log" "Total Additions: " | rex "Total Additions: \s*(?<Total_Additions>.+)\s*" | fields Total_Additions | head 1 | eval range=if(Total_Additions=="0", "severe", "low")
To display Total Errors I use the script below;
host="VMXXX12" source="D:\\Box\\FIL\\Logs\\Pbsa\\Import Activity.log" "Total Errors during Add: " | rex "Total Errors during Add: \s*(?<Total_Error>.+)\s*" | fields Total_Error | head 1 | eval range=if(Total_Error=="0", "low", "severe")
Thanks!
