How can I extract this string from a value in my sample log?

[rakeshkumar_sah]

Hi,

I have logs followed with a structure like this:

start Performance Logging: [txID=123456789-EJBClientf123456789-EJBServerf12456789;funtion=getClientValue]

How can I extract the EJBServerf12356789 values from txID?

Thanks for the response.

[richgalloway]

Rex can do the job. The following will break the txID field into three parts which you can then process.

... | rex field=txID "(?P<txID1>.*)-(?P<txID2>.*)-(?P<txID3>[^;]*)" | ...