Hello everyone,
Please, I need to extract a field named product (with its value in bold) from the below Message field values, and a field named status (with its value in italics):
Message="Product: Microsoft SQL Server 2019 LocalDB -- Installation completed successfully."
Message="Product: Microsoft OLE DB Driver for SQL Server -- Installation completed successfully."
Thank you in advance.
Hi @evallja,
please try this:
| rex field=Message "^Product:\s+(?<Product>[^-]+)"
that you can test at https://regex101.com/r/922J2Q/1
Ciao.
Giuseppe
Hi @evallja,
please try this:
| rex field=Message "^Product:\s+(?<Product>[^-]+)"
that you can test at https://regex101.com/r/922J2Q/1
Ciao.
Giuseppe