Could you please anyone help me to extract the seconds values from the below log, please share the query to extract the seconds value from the logs.
Nov 30, 2016 09:31:04 AM CST INFO (TransactionSearchDelegateImpl.java:55) - Transaction Search Query  Time (in seconds) = 13.206
This should do it.
... | rex "=\s+(?<seconds>[\d\.]+)" | ...
View solution in original post
Try the following rex command:
rex field=_raw "Time \(in seconds\) = (?<TimeInSec>\d+\.\d+)"
PS: Once tested push to props.conf as Field Extraction Knowledge Object, through Interactive Field Extraction or editing props.conf directly.