Splunk Search

How to write the regular expression to extract this field from my sample events?

imthesplunker
Path Finder

Hi ,

I have like multiple events with more than 200 XADataSource. Need to get all "XADataSource" from the events by creating regex from the event.

Please find the Sample events :

Event 2:

weblogic.jdbc.extensions.PoolDisabledSQLException: weblogic.common.resourcepool.ResourceDisabledException: Pool GOMSCLMBRDCNonXADataSource is Suspended, cannot allocate resources to applications..

Event 3:

"SELECT 1 FROM DUAL" set up for pool "SOMSUSNonXADataSource" failed with exception: "java.sql.SQLRecoverableException: No more data to read from socket".>

Can anyone please me out?

0 Karma
1 Solution

sundareshr
Legend

Try this for your regex

"(?<xds>\w+XADataSource)"

View solution in original post

0 Karma

sundareshr
Legend

Try this for your regex

"(?<xds>\w+XADataSource)"

View solution in original post

0 Karma

imthesplunker
Path Finder

Thanks. It worked out .

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.