Splunk Search

How to write the regular expression to extract this field from my sample events?

imthesplunker
Path Finder

Hi ,

I have like multiple events with more than 200 XADataSource. Need to get all "XADataSource" from the events by creating regex from the event.

Please find the Sample events :

Event 2:

weblogic.jdbc.extensions.PoolDisabledSQLException: weblogic.common.resourcepool.ResourceDisabledException: Pool GOMSCLMBRDCNonXADataSource is Suspended, cannot allocate resources to applications..

Event 3:

"SELECT 1 FROM DUAL" set up for pool "SOMSUSNonXADataSource" failed with exception: "java.sql.SQLRecoverableException: No more data to read from socket".>

Can anyone please me out?

0 Karma
1 Solution

sundareshr
Legend

Try this for your regex

"(?<xds>\w+XADataSource)"

View solution in original post

0 Karma

sundareshr
Legend

Try this for your regex

"(?<xds>\w+XADataSource)"
0 Karma

imthesplunker
Path Finder

Thanks. It worked out .

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...

Getting Started with Splunk Artificial Intelligence, Insights for Nonprofits, and ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Splunk Observability Cloud’s AI Assistant in Action Series: Identifying Unknown ...

Agentic AI powers the Splunk AI Assistant within the Splunk Observability Cloud interface to help you quickly ...