Given a string:
I want to retrieve the value for "path" and "totalTime" to create a visualization.
rex field=log "path=(?< endpoint>\/\w+),totalTime=(?< milliseconds>\d+)"
...doesn't produce any results. I've tried several variations. Can anyone help with this rex?
It doesn't produce any results.
View solution in original post
rex "path=(?P< endPoint>.*?)," | rex "totalTime=(?P< milliseconds>\d+)"
add these rex to your query to get the results.