I have log file like this,want regex everything after last colon in each line
input:
Hi
based on your example.
| rex field=_raw "\d{4,}:(?<message>[^:]+)"
r. Ismo
It’s different sometimes locate in other position
e.g not work on this, that’s why i said “latest” colon position and number of colon may be different
input:
2020-06-28 12:08:21,777 ERROR in-app-9999999 [Service] authorize: org.closed.PropertyAccessException: Null value was assigned to a property [class co.domain.entity] of primitive type setter of domain.entity.
Output:
Null value was assigned to a property [class co.domain.entity] of primitive type setter of domain.entity.