i need to extract errorMessage. Can anyone of you ...

[vineela]

2024-07-16T10:59:41.259Z eff08259-3379-5637-b5fe-dd4967aee355 ERROR Invoke Error {"errorType":"Error","errorMessage":"Required Message Attribute [EventTimestamp] is missing","errorCode":_ERROR","name":"Error","stack":["Error: Required Message Attribute [EventTimestamp] is missing"," at throwRequiredParameterError 

In the above log i need to extract errorMessage which was highlighted....Can anyone of you please help me in writing regex for the same.

[richgalloway]

This regex will extract the highlighted text

(?<msg>"errorMessage":"[^"]+")

[PickleRick]

Of course assuming you don't have any escaped quote in your error string. That's the problem with

1) Manipulating structured data with regexes

2) Sending structured data (json, xml) as part of an otherwise unstructured event.

So generally, it should work but be aware that there might be border cases where it will not capture whole message. This captures with possible escaped quotes:

(?<msg>"errorMessage":".*?(?<!\\)")