Extract timetaken from line

[balash1979]

Here is my log line
{"line":"2019-12-09T11:40:13.049Z LCS LCE [pool-8-thread-13] INFO i.r.rest.- job:{id=cd254f615c304c028c85c28a3356a432, status=ready, createdOn=1575891540031, timeTaken=73017, lastModified=1575891613048}

I would like to extract timeTaken from the above line and divide that by 60000. What regex should I use.

[vnravikumar · Accepted solution]

Hi

Try this

| makeresults 
| eval test="{\"line\":\"2019-12-09T11:40:13.049Z LCS LCE [pool-8-thread-13] INFO i.r.rest.- job:{id=cd254f615c304c028c85c28a3356a432, status=ready, createdOn=1575891540031, timeTaken=73017, lastModified=1575891613048}" 
| rex field=test "timeTaken=(?P<timeTaken>\d+)" 
| eval output =tonumber(timeTaken)/60000