Getting Data In

unable to retrieve string from a big string with special symbols. Any help?

indianhans
Engager

Hi Wish to retrieve hammadahmad from below string. Below string contain html tag ( & a p o s ; ) without space.

  • String = &a pos;hammadahmad&ap os; (service Active Directory)
  • Current Regular Expression : | rex "Session login, user(?P/<USER/>.*?)logging in from machine"

alt text

Any help will be appreciated.

0 Karma

sduff_splunk
Splunk Employee
Splunk Employee
rex field=USERNAME "&apos;(?<user>\S+)&apos;"
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...