How to fetch Error message from raw logs

[aditsss]

Hi Team,

Below is my raw logs:

2023-09-29 14:10:05.598 [ERROR] [Thread-3] CollateralFileGenerator - *****************************************FAILURE in sending control file collateral files to ABS Suite!!!*****************************************

I want to separate "FAILURE in sending control file collateral files to ABS Suite!!!" as my ERROR message 

Can someone guide me on this

[richgalloway · Accepted solution]

Use the rex command to extract the message.

| rex "\*+(?<ERROR>[^\*]+)"

 This regex takes everything between asterisks and puts it into the ERROR field.