I have a log that has the following:
Blah blah bloh HandleBusInfoMessage=31951592=460892.509; nextcommand Blah HandleSomethingElse=31951592=460892.509 Blah ...
I want to extract the following:
HandleBusInfoMessageCount=31951592
HandleBusInfoMessageTime=460892.509
HandleSomethingElseCount=31951592
HandleSomethingElseTime=460892.509
The command name (Handle*) can be variable.
Thanks for the help in advance.
One thing I need to add is that the command name (Handle*) can be variable so I would need to rex it I would assume.
You could use the Interactive Field Extractor to do this
See this guide (for 6.1).
Note this process becomes significantly easier in 6.2.
One thing I need to add is that the command name (Handle*) can be variable so I would need to rex it I would assume.
After you use the field extractor, you can edit the regex that is generated so that it can accommodate any of the values that might be seen. e.g. [\w\d_+]
instead of where it might have generated "Handle". Then you can retest the extraction, and repeat until its perfect.