thank you for the reply. i want to extract values inside the pay load. like transactionId, statusMessage
| rex "cid:(?<cid>\S+) code_version:(?<codeversion>\S+)"
thank you for the reply. i want to extract values inside the pay load. like transactionId, statusMessage
| rex "Payload: b\'(?<payload>\{[^\}]+\})\'"
| spath input=payload