Hi, Can someone help me with field extraction for string :
/home/mysqld/databasename/audit/audit.log
I want to extract databasename as Database to be used
i have written regex but getting error, can someone help with correct regex:
rex field=source "\/home\/\/mysqld\//(?<Database>.*)/audit\/"
It would help to know what error you're getting.
The regex has too many slashes. needs explicit <>, and the slash before "audit" must be escaped. This works with the example data.
| rex field=source "\/home\/mysqld\/(?<Database>.*)\/audit\/"
It would help to know what error you're getting.
The regex has too many slashes. needs explicit <>, and the slash before "audit" must be escaped. This works with the example data.
| rex field=source "\/home\/mysqld\/(?<Database>.*)\/audit\/"