Getting Data In

Break event and extract fields from script input

kpavan
Path Finder

Hi All,

Am getting custom scripted input from one of our app server, but wanted to know understand how to break these events and extract fields for below sample output. Could you please help me to solve this.

Suffix DN : Server : Entries : Replication enabled : DS ID : RS ID : RS Port (1) : M.C. (2) : A.O.M.C. (3) : Security (4)
dc=domain,dc=com : server1.domain.com:PORT : 156827 : true : 23636 : 11208 : 8989 : 0 : : true
dc=domain,dc=com : server2.domain.com:PORT : 156827 : true : 14162 : 7315 : 8989 : 0 : : true
Suffix DN : Server : Entries : Replication enabled : DS ID : RS ID : RS Port (1) : M.C. (2) : A.O.M.C. (3) : Security (4)
dc=domain,dc=com : server1.domain.com:PORT : 156827 : true : 23636 : 11208 : 8989 : 0 : : true
dc=domain,dc=com : server2.domain.com:PORT : 156827 : true : 14162 : 7315 : 8989 : 0 : : true
Suffix DN : Server : Entries : Replication enabled : DS ID : RS ID : RS Port (1) : M.C. (2) : A.O.M.C. (3) : Security (4)
dc=domain,dc=com : server1.domain.com:PORT : 156827 : true : 23636 : 11208 : 8989 : 0 : : true
dc=domain,dc=com : server2.domain.com:PORT : 156827 : true : 14162 : 7315 : 8989 : 0 : : true

Thanks!
Pavan

0 Karma

xpac
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Cultivate Your Career Growth with Fresh Splunk Training

Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...

Introducing a Smarter Way to Discover Apps on Splunkbase

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve ...

How to Send Splunk Observability Alerts to Webex teams in Minutes

As a Developer Evangelist at Splunk, my team and I are constantly tinkering with technology to explore its ...