I want to extract a field from the log event using regex .following is the sample log event , can someone tell me how to write rex for it .My rex isn't working ,it says mismatched ']'
java.util.concurrent.Exception: Code: Internal Server Error; Exception: com.rate.ps.execute.exception.Exception: { "message": "not upto date" }
... 11 lines omitted ...
I want to write rex for "Code: Internal Server Error; Exception: com.rate.ps.execute.exception.Exception: { "message": "not upto date" }"
|rex (?([a-zA-Z]\w+.)+\w*Exception\W+[^"]+\W:\W+[^"]+\W*)
Not real sure which part you are trying to capture, but here is what I came up with:
| rex "java\.util\.concurrent\.Exception\:\s(?<CODE>.[^\;]+)\;\sException\:(?<EXCEPTION>.[^\:]+)\:\s\{\s(?<MSG>.[^\}]+)"
Let me know if you need more.