i am finding difficulty with dashboard XML beacause of
tag SubErrorCode
please help me with this
<search>
<query>-------------| rex "\"subErrorCode\":\"(?<SubErrorCode>w\w\w_\d+)"| dedup SubErrorCode |table SubErrorCode </query>
</search>
i got it by using escape characters
@sravankaripe: Did your answer provide a working solution to your question? If yes, don't forget to click "Accept".
Ok, it's working for me
-------------| rex "\"subErrorCode\":\"(?<SubErrorCode>w\w\w_\d+)"| dedup SubErrorCode |table SubErrorCode
tag SubErrorCode