Splunk Search

How to write the regular expression to extract this field from my sample events?

imthesplunker
Path Finder

Hi ,

I have like multiple events with more than 200 XADataSource. Need to get all "XADataSource" from the events by creating regex from the event.

Please find the Sample events :

Event 2:

weblogic.jdbc.extensions.PoolDisabledSQLException: weblogic.common.resourcepool.ResourceDisabledException: Pool GOMSCLMBRDCNonXADataSource is Suspended, cannot allocate resources to applications..

Event 3:

"SELECT 1 FROM DUAL" set up for pool "SOMSUSNonXADataSource" failed with exception: "java.sql.SQLRecoverableException: No more data to read from socket".>

Can anyone please me out?

0 Karma
1 Solution

sundareshr
Legend

Try this for your regex

"(?<xds>\w+XADataSource)"

View solution in original post

0 Karma

sundareshr
Legend

Try this for your regex

"(?<xds>\w+XADataSource)"
0 Karma

imthesplunker
Path Finder

Thanks. It worked out .

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...