How can I extract these 3 values from this string via regex?

[vinay4444]

Hi

I need a regex match on the below pattern. I need to capture 3 values from

"ms.db.tablespace_status_ind[DBID_FACT_D03,NORMAL]"

name -> ms.db.tablespace_status_ind
table-> DBID_FACT_D03
status-> NORMAL

[esix_splunk · Accepted solution]

Based on your sample event:

^(?<capture1>[^\[]+)\[(?<capture2>[^\,]+),(?<capture3>[^\]]+)\]

You can rename the capture groups to fix your needs... This also assumes that there are not quotes enclosing the event, and that its starts from the beginning of the line.