How to create regex for below data?

[AK_Splunk]

Need help with regex for below data. Please assist me on the same.

field name -------- fieldvalue

Devicename------GNTESTFS1

Sample data

Jan 5 15:34:18 7.73.151.197 1 2023-01-05T14:34:17Z 1.2.3.44 StorageArray - - [0@0] GNTESTFS1;2288;Critical;Either the NTP server's resolved or configured IP address is wrong or the IP address is unavailable via the attached network
Jan 5 15:31:20 7.73.151.197 1 2023-01-05T14:31:19Z 1.2.3.44 StorageArray - - [0@0] GNTESTFS1;2288;Critical;Either the NTP server's resolved or configured IP address is wrong or the IP address is unavailable via the attached network
Jan 5 09:32:37 7.73.151.197 1 2023-01-05T08:32:36Z 1.2.3.44 StorageArray - - [0@0] GNTESTFS1;2288;Critical;Either the NTP server's resolved or configured IP address is wrong or the IP address is unavailable via the attached network

Thanks in advance

[gcusello]

Hi @AK_Splunk,

please try this regex :

| rex "\]\s+(?<Devicename>[^;]+)"

that you can test at https://regex101.com/r/GDOK8U/1

Ciao.

Giuseppe