Need a splunk query to extract fields from the event which are multiple lines

[bmanikya]

From the events below, wanted to extract fields as per my requirements. Please check events are not listed

Event 1 

gcse1 DB-OK-lpdecpdb0001089-deusw1pgecpsd000083
nemoe1 DB-OK-lpdecpdb0000922-hvidlnssdb01
gcodse1 DB-OK-lpdecpdb0002495-deusw1pgecpsd000198
edmse1 DB-OK-lpdecpdb0002521
vPaymente1 DB-OK-lpdecpdb0001121-deusw1pgecpsd000094
cadence1 DB-OK-lpdecpdb0001269-deusw1pgecpsd000111

Event 2

nemoe1 DB-OK-lpdecpdb0000922-hvidlnssdb01
gcodse1 DB-OK-lpdecpdb0002495-deusw1pgecpsd000198
gcse1 DB-OK-lpdecpdb0001089-deusw1pgecpsd000083
cadence1 DB-OK-lpdecpdb0001269-deusw1pgecpsd000111
edmse1 DB-OK-lpdecpdb0002521
vPaymente1 DB-OK-lpdecpdb0001121-deusw1pgecpsd000094

Event 3

nemoe1 DB-OK-lpdecpdb0000922-hvidlnssdb01
gcodse1 DB-OK-lpdecpdb0002495-deusw1pgecpsd000198
gcse1 DB-OK-lpdecpdb0001089-deusw1pgecpsd000083
cadence1 DB-OK-lpdecpdb0001269-deusw1pgecpsd000111
edmse1 DB-OK-lpdecpdb0002521
vPaymente1 DB-OK-lpdecpdb0001121-deusw1pgecpsd000094

First column from the above event lines must be extracted as "ClusterName"

gcse1

nemoe1

gcodse1

edmse1

vPaymente1

caddence1

Second Column from the above event lines must be extracted as "DB_Status"

DB-OK

Third Column from the above event lines must be extracted as "PostgresDB_VIPName"

lpdecpdb0001089

lpdecpdb0000922

lpdecpdb0002495

lpdecpdb0002521

lpdecpdb0001121

lpdecpdb0001269

[bmanikya]

I got it, thank you.

[bmanikya]

Could you let me know, if DB_Status on all event lines. It is returning only one value

[ITWhisperer]

| rex max_match=0 "(?<ClusterName>\S+)\s+(?<DB_Status>\w+-\w+)-(?<PostgresDB_VIPName>[^\-\s]+)"