Hi, all!
Here's my log file:
- the pattern: raw call progress sequence is: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
- the length of the value of the raw call progress sequence might differ from each other
My request is how could I extract the highlighted part as a new filed!!!
2022-02-07 16:27:49,423|tOX-u3JFAq6EmU3FXYy-Td2|DEBUG|com.hsbc.hvf.mi.MIAPI|endCallMI()|MI insertion started... 2022-02-07 16:27:49,423|tOX-u3JFAq6EmU3FXYy-Td2|DEBUG|com.hsbc.hvf.mi.MIAPI|endCallMI()|raw call progress sequence is:31381113209410021947204792292008771577067705W019W021W023W02099529959
raw call progress sequence is:31381116209410122047922920012099215396732101210296887903763575957598W016E194Q098U165W023A024995299563173
raw call progress sequence is:313811112094100231941577
raw call progress sequence is:313811162094100219472047922920012099215396732101210296889296961877197902790876367637W016E191Q064U086W023A70299529956653765386604W016CS00E191Q064U086W023A7029952995665376538
raw\scall\sprogress\ssequence\sis:\s(?<progress_sequence>\S+)
I'm not fully sure from your examples whether there should be \s or not between : and (
raw\scall\sprogress\ssequence\sis:\s(?<progress_sequence>\S+)
I'm not fully sure from your examples whether there should be \s or not between : and (