Hello,
I would like to extract the 10 milliseconds in the below snippet of text as a separate value in a field. Is there anyway to do this? Thank you!!
2022-10-02T12:56:40.073Z [BillingExecutors-4] INFO com...els.kafka.ElsKafkaReceiver - Message processing time at event aggregator in milli seconds 10
2022-10-02T12:56:40.073Z [BillingExecutors-4] INFO com...els.kafka.ElsKafkaReceiver - Message processing time at event aggregator in milli seconds 10
your_search...
| rex "milli seconds (?<millis>\d+)
will extract a new field called millis from the _raw field based on that regex pattern in the rex statement
your_search...
| rex "milli seconds (?<millis>\d+)
will extract a new field called millis from the _raw field based on that regex pattern in the rex statement
thank you!