I have to extract the highlighted value as a single field in splunk. Any help.
hi @inkedia
try the below search
your search |rex field=_raw max_match=0 "(?<taskid>TASK\d+)"|table taskid
if this help karma points are appreciated /accept the solution it might help others
supper helpful... thanks
Nothing is highlighted. Please specify what you are trying to extract, how you've tried to extract it, and how those attempts failed to meet expectations.
Sorry but my I wanted info as to how to extract the values starting with TASK...... they are the bolded stuff
hi @inkedia
try the below search
your search |rex field=_raw max_match=0 "(?<taskid>TASK\d+)"|table taskid
if this help karma points are appreciated /accept the solution it might help others