Splunk Search

Regex to break log into separate events

justindett
Path Finder

Hi,

Can someone assist me with breaking the following log data into separate events in the props.conf?

Each event should start with:

{
"Timestamp": "xxxxxxxxxxxx"

And ends with:

}

See below log detail which should be split into two events.

{
"Timestamp": "2024-03-18T07:25:32.208+00:00",
"Level": "ERR",
"Message": "Validation failed: \n -- ProductId: 'Product Id' must be greater than '0'. Severity: Error",
"Properties": {
"RequestId": "0HJYGFTHJK:00000003",
"RequestPath": "/apps/-7/details",
"CorrelationId": "87hjg76-gh678-77h7-ll98-pu7nsb67w567w",
"ConnectionId": "KJUY686GT",
"MachineName": "kic-aiy-tst-heaps-tst-6h6hfjk-980jk",
"SolutionName": "Kic AIY - Test",
"Environment": "test",
"LoggerName": "Kic AIY - Test",
"ApplicationName": "Kic AIY - Test",
"ThreadId": "1",
"ProcessId": "1",
"ProcessUserId": "root",
"SiteName": "Kic AIY - Test"
},
"Exception": {
"ExceptionSource": "Api.Utilities",
"ExceptionType": "FluentValidation.ValidationException",
"ExceptionMessage": "Validation failed: \n -- ProductId: 'Product Id' must be greater than '0'. Severity: Error",
"StackTrace": " at Api.Utilities.Behaviours.ValidationBehavior`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken),"
"FileName": null,
"MethodName": "Api.Utilities.Behaviours.ValidationBehavior`2+<Handle>d__2",
"Line": 0,
"Data": null
},
"RequestBody": null,
"Additional": null
}
{
"Timestamp": "2024-03-18T07:15:04.259+00:00",
"Level": "ERR",
"Message": "Validation failed: \n -- ProductId: 'Product Id' must be greater than '0'. Severity: Error",
"Properties": {
"RequestId": "0HJYGFTRJK:00000004",
"RequestPath": "/apps/-7/details",
"CorrelationId": "87hjg76-gh878-77h7-ll98-ku7nsb67w567w",
"ConnectionId": "KJUY686GT",
"MachineName": "kic-aiy-ts2t-heaps-tst2-6h6hfjk-980jk",
"SolutionName": "Kic AIY - Test2",
"Environment": "test",
"LoggerName": "Kic AIY - Test2",
"ApplicationName": "Kic AIY - Test2",
"ThreadId": "1",
"ProcessId": "1",
"ProcessUserId": "root",
"SiteName": "Kic AIY - Test"
},
"Exception": {
"ExceptionSource": "Api.Utilities",
"ExceptionType": "FluentValidation.ValidationException",
"ExceptionMessage": "Validation failed: \n -- ProductId: 'Product Id' must be greater than '0'. Severity: Error",
"StackTrace": " at Api.Utilities.Behaviours.ValidationBehavior`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken),"
"FileName": null,
"MethodName": "Api.Utilities.Behaviours.ValidationBehavior`2+<Handle>d__2",
"Line": 0,
"Data": null
},
"RequestBody": null,
"Additional": null
}
Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

Your input seems to be almost valid JSON, but not exactly. It misses "," between events.

So you could use this 

[<Your sourcetype here>]
CHARSET=UTF-8
LINE_BREAKER=([\n\r]+)\{[\n\r]*"Timestamp"
MAX_TIMESTAMP_LOOKAHEAD=32
NO_BINARY_CHECK=true
SHOULD_LINEMERGE=false
category=Custom
description=test
disabled=false
pulldown_type=true
TIME_FORMAT=%Y-%m-%dT%H:%M:%S.%3Q%:z
TIME_PREFIX="Timestamp":\s+"

r. Ismo 

0 Karma

justindett
Path Finder

Thanks, it seems to be breaking at the right place, but I'm still getting multiple entries as one event.

Doesn't seem to be splitting them into separate events for each of the following entries:

 { "Timestamp": "2024-03-18T10:57:17.096+00:00",

}

0 Karma

isoutamo
SplunkTrust
SplunkTrust

You have also this 

SHOULD_LINEMERGE=false

on your sourcetype? You can check it by

splunk btool props list <your sourcetype name here> --debug

 Previous command shows what is applied to your sourcetype (or at least after next refresh/reboot of splunk) and from which props.conf files those are coming.

Can you give sample of those events which aren't break correctly?

0 Karma

justindett
Path Finder

Yes, this is specific to one sourcetype. I have confirmed it has been edited as follows:

[glc:api:bff:tst]
CHARSET=UTF-8
LINE_BREAKER=([\n\r]+)\{[\n\r]*"Timestamp"
MAX_TIMESTAMP_LOOKAHEAD=32
NO_BINARY_CHECK=true
SHOULD_LINEMERGE=false
category=Custom
description=test
disabled=false
pulldown_type=true
TIME_FORMAT=%Y-%m-%dT%H:%M:%S.%3Q%:z
TIME_PREFIX="Timestamp":\s+"

 

I have attached a screenshot of the events in Splunk and also a .txt with the content of one of the events. You will notice more than one entry in this single event.

0 Karma

justindett
Path Finder

EVENT Time 3/18/24 12:58:45.880 PM

{
"Timestamp": "2024-03-18T10:58:45.880+00:00",
"Level": "ERR",
"Message": "The HTTP status code of the response was not expected (404).\n\nStatus: 404\nResponse: \n{\"IsError\":false,\"IsValidationError\":false,\"IsNotFound\":true,\"IsDisplayError\":false,\"Type\":\"http://glc-api-integration-tst.cs.sanlam.co.za/intermediary-accreditations\",\"Status\":404,\"Title\":\"Not found error\",\"Detail\":\"Intermediary accreditation Product not found. Search parameters: WhiteLabel: GLC, ProductCode: SANFRP01, GuaranteedIncome: False, GuaranteedCapital: False, GuaranteedAnnuitySingleLife: False, GuaranteedAnnuityJointLife: False \",\"Errors\":[],\"ValidationErrors\":{}}",
"Properties": {
"RequestId": "0HN271KO7M0H2:00000007",
"RequestPath": "/products/fit-and-proper",
"CorrelationId": "1e5975b4-d3e3-42c5-9bed-48760f4002d8",
"ConnectionId": "0HN271KO7M0H2",
"MachineName": "k8s-glc-api-bff-portal-tst-7b67f985b5-xqspv",
"SolutionName": "PortalBFF",
"Environment": "tst",
"LoggerName": "PortalBFF",
"ApplicationName": "PortalBFF",
"ThreadId": "1",
"ProcessId": "1",
"ProcessUserId": "root",
"SiteName": "PortalBFF"
},
"Exception": {
"ExceptionSource": "API.Client.3rdParty.Integration",
"ExceptionType": "Api.Client.ThirdParty.Integration.V1.ApiException",
"ExceptionMessage": "The HTTP status code of the response was not expected (404).\n\nStatus: 404\nResponse: \n{\"IsError\":false,\"IsValidationError\":false,\"IsNotFound\":true,\"IsDisplayError\":false,\"Type\":\"http://glc-api-integration-tst.cs.sanlam.co.za/intermediary-accreditations\",\"Status\":404,\"Title\":\"Not found error\",\"Detail\":\"Intermediary accreditation Product not found. Search parameters: WhiteLabel: GLC, ProductCode: SANFRP01, GuaranteedIncome: False, GuaranteedCapital: False, GuaranteedAnnuitySingleLife: False, GuaranteedAnnuityJointLife: False \",\"Errors\":[],\"ValidationErrors\":{}}",
"StackTrace": " at Api.Client.ThirdParty.Integration.V1.IntegrationClient.IntermediaryAccreditationAsync(IntermediaryAccreditationProductRequestModel model, CancellationToken cancellationToken)\n at Providers.ExternalIntegrations.FitAndProper.V1.FitAndProperProvider.IntermediaryAccreditation(IntermediaryAccreditationProductRequestModel model, CancellationToken cancellationToken) in /src/Providers/ExternalIntegrations/FitAndProper/V1/FitAndProperProvider.cs:line 14\n at Services.ExternalIntegrations.FitAndProper.Queries.V1.GetFitAndProperQueryHandler.Handle(GetFitAndProperQuery request, CancellationToken cancellationToken) in /src/Services/ExternalIntegrations/FitAndProper/Queries/V1/GetFitAndProperQuery.cs:line 37\n at Api.Utilities.Behaviours.PerformanceBehaviour`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken)\n at Api.Utilities.Behaviours.ValidationBehavior`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken)\n at Api.Controller.Products.V1.ProductsController.GetFitAndProper(GetFitAndProperQuery request, CancellationToken cancellationToken) in /src/Api/Controller/Products/V1/ProductsController.cs:line 53\n at lambda_method954(Closure , Object )\n at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.AwaitableObjectResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeActionMethodAsync>g__Logged|12_1(ControllerActionInvoker invoker)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeNextActionFilterAsync>g__Awaited|10_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Rethrow(ActionExecutedContextSealed context)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeInnerFilterAsync>g__Awaited|13_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeFilterPipelineAsync>g__Awaited|20_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)\n at Microsoft.AspNetCore.Routing.EndpointMiddleware.<Invoke>g__AwaitRequestTask|6_0(Endpoint endpoint, Task requestTask, ILogger logger)\n at Microsoft.AspNetCore.Authorization.AuthorizationMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.ClaimsMiddleware.Invoke(HttpContext context, IUserService userService)\n at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.SwaggerUiIndexMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.RedirectToIndexMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.OpenApiDocumentMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.SwaggerBasicAuthMiddleware.InvokeAsync(HttpContext context)\n at Microsoft.AspNetCore.ResponseCompression.ResponseCompressionMiddleware.InvokeCore(HttpContext context)\n at Api.Utilities.Middleware.RequestBodyMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.LoggingMiddleware.Invoke(HttpContext context)",
"FileName": null,
"MethodName": "Api.Client.ThirdParty.Integration.V1.IntegrationClient+<IntermediaryAccreditationAsync>d__15",
"Line": 0,
"Data": null
},
"RequestBody": null,
"Additional": null
}
{
"Timestamp": "2024-03-18T10:58:46.979+00:00",
"Level": "ERR",
"Message": "The HTTP status code of the response was not expected (404).\n\nStatus: 404\nResponse: \n{\"IsError\":false,\"IsValidationError\":false,\"IsNotFound\":true,\"IsDisplayError\":false,\"Type\":\"http://glc-api-integration-tst.cs.sanlam.co.za/intermediary-accreditations\",\"Status\":404,\"Title\":\"Not found error\",\"Detail\":\"Intermediary accreditation Product not found. Search parameters: WhiteLabel: GLC, ProductCode: SANFRP01, GuaranteedIncome: False, GuaranteedCapital: False, GuaranteedAnnuitySingleLife: False, GuaranteedAnnuityJointLife: False \",\"Errors\":[],\"ValidationErrors\":{}}",
"Properties": {
"RequestId": "0HN271KO7M0H6:00000002",
"RequestPath": "/products/fit-and-proper",
"CorrelationId": "31069097-572e-42cd-b47d-688b63260705",
"ConnectionId": "0HN271KO7M0H6",
"MachineName": "k8s-glc-api-bff-portal-tst-7b67f985b5-xqspv",
"SolutionName": "PortalBFF",
"Environment": "tst",
"LoggerName": "PortalBFF",
"ApplicationName": "PortalBFF",
"ThreadId": "1",
"ProcessId": "1",
"ProcessUserId": "root",
"SiteName": "PortalBFF"
},
"Exception": {
"ExceptionSource": "API.Client.3rdParty.Integration",
"ExceptionType": "Api.Client.ThirdParty.Integration.V1.ApiException",
"ExceptionMessage": "The HTTP status code of the response was not expected (404).\n\nStatus: 404\nResponse: \n{\"IsError\":false,\"IsValidationError\":false,\"IsNotFound\":true,\"IsDisplayError\":false,\"Type\":\"http://glc-api-integration-tst.cs.sanlam.co.za/intermediary-accreditations\",\"Status\":404,\"Title\":\"Not found error\",\"Detail\":\"Intermediary accreditation Product not found. Search parameters: WhiteLabel: GLC, ProductCode: SANFRP01, GuaranteedIncome: False, GuaranteedCapital: False, GuaranteedAnnuitySingleLife: False, GuaranteedAnnuityJointLife: False \",\"Errors\":[],\"ValidationErrors\":{}}",
"StackTrace": " at Api.Client.ThirdParty.Integration.V1.IntegrationClient.IntermediaryAccreditationAsync(IntermediaryAccreditationProductRequestModel model, CancellationToken cancellationToken)\n at Providers.ExternalIntegrations.FitAndProper.V1.FitAndProperProvider.IntermediaryAccreditation(IntermediaryAccreditationProductRequestModel model, CancellationToken cancellationToken) in /src/Providers/ExternalIntegrations/FitAndProper/V1/FitAndProperProvider.cs:line 14\n at Services.ExternalIntegrations.FitAndProper.Queries.V1.GetFitAndProperQueryHandler.Handle(GetFitAndProperQuery request, CancellationToken cancellationToken) in /src/Services/ExternalIntegrations/FitAndProper/Queries/V1/GetFitAndProperQuery.cs:line 37\n at Api.Utilities.Behaviours.PerformanceBehaviour`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken)\n at Api.Utilities.Behaviours.ValidationBehavior`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken)\n at Api.Controller.Products.V1.ProductsController.GetFitAndProper(GetFitAndProperQuery request, CancellationToken cancellationToken) in /src/Api/Controller/Products/V1/ProductsController.cs:line 53\n at lambda_method954(Closure , Object )\n at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.AwaitableObjectResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeActionMethodAsync>g__Logged|12_1(ControllerActionInvoker invoker)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeNextActionFilterAsync>g__Awaited|10_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Rethrow(ActionExecutedContextSealed context)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeInnerFilterAsync>g__Awaited|13_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeFilterPipelineAsync>g__Awaited|20_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)\n at Microsoft.AspNetCore.Routing.EndpointMiddleware.<Invoke>g__AwaitRequestTask|6_0(Endpoint endpoint, Task requestTask, ILogger logger)\n at Microsoft.AspNetCore.Authorization.AuthorizationMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.ClaimsMiddleware.Invoke(HttpContext context, IUserService userService)\n at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.SwaggerUiIndexMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.RedirectToIndexMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.OpenApiDocumentMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.SwaggerBasicAuthMiddleware.InvokeAsync(HttpContext context)\n at Microsoft.AspNetCore.ResponseCompression.ResponseCompressionMiddleware.InvokeCore(HttpContext context)\n at Api.Utilities.Middleware.RequestBodyMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.LoggingMiddleware.Invoke(HttpContext context)",
"FileName": null,
"MethodName": "Api.Client.ThirdParty.Integration.V1.IntegrationClient+<IntermediaryAccreditationAsync>d__15",
"Line": 0,
"Data": null
},
"RequestBody": null,
"Additional": null
}
{
"Timestamp": "2024-03-18T10:58:49.080+00:00",
"Level": "ERR",
"Message": "The HTTP status code of the response was not expected (404).\n\nStatus: 404\nResponse: \n{\"IsError\":false,\"IsValidationError\":false,\"IsNotFound\":true,\"IsDisplayError\":false,\"Type\":\"http://glc-api-integration-tst.cs.sanlam.co.za/intermediary-accreditations\",\"Status\":404,\"Title\":\"Not found error\",\"Detail\":\"Intermediary accreditation Product not found. Search parameters: WhiteLabel: GLC, ProductCode: SANFRP01, GuaranteedIncome: False, GuaranteedCapital: False, GuaranteedAnnuitySingleLife: False, GuaranteedAnnuityJointLife: False \",\"Errors\":[],\"ValidationErrors\":{}}",
"Properties": {
"RequestId": "0HN271KO7M0H8:00000002",
"RequestPath": "/products/fit-and-proper",
"CorrelationId": "d7ccaaaa-1a6d-4dbe-9b80-ad63fc69a1c5",
"ConnectionId": "0HN271KO7M0H8",
"MachineName": "k8s-glc-api-bff-portal-tst-7b67f985b5-xqspv",
"SolutionName": "PortalBFF",
"Environment": "tst",
"LoggerName": "PortalBFF",
"ApplicationName": "PortalBFF",
"ThreadId": "1",
"ProcessId": "1",
"ProcessUserId": "root",
"SiteName": "PortalBFF"
},
"Exception": {
"ExceptionSource": "API.Client.3rdParty.Integration",
"ExceptionType": "Api.Client.ThirdParty.Integration.V1.ApiException",
"ExceptionMessage": "The HTTP status code of the response was not expected (404).\n\nStatus: 404\nResponse: \n{\"IsError\":false,\"IsValidationError\":false,\"IsNotFound\":true,\"IsDisplayError\":false,\"Type\":\"http://glc-api-integration-tst.cs.sanlam.co.za/intermediary-accreditations\",\"Status\":404,\"Title\":\"Not found error\",\"Detail\":\"Intermediary accreditation Product not found. Search parameters: WhiteLabel: GLC, ProductCode: SANFRP01, GuaranteedIncome: False, GuaranteedCapital: False, GuaranteedAnnuitySingleLife: False, GuaranteedAnnuityJointLife: False \",\"Errors\":[],\"ValidationErrors\":{}}",
"StackTrace": " at Api.Client.ThirdParty.Integration.V1.IntegrationClient.IntermediaryAccreditationAsync(IntermediaryAccreditationProductRequestModel model, CancellationToken cancellationToken)\n at Providers.ExternalIntegrations.FitAndProper.V1.FitAndProperProvider.IntermediaryAccreditation(IntermediaryAccreditationProductRequestModel model, CancellationToken cancellationToken) in /src/Providers/ExternalIntegrations/FitAndProper/V1/FitAndProperProvider.cs:line 14\n at Services.ExternalIntegrations.FitAndProper.Queries.V1.GetFitAndProperQueryHandler.Handle(GetFitAndProperQuery request, CancellationToken cancellationToken) in /src/Services/ExternalIntegrations/FitAndProper/Queries/V1/GetFitAndProperQuery.cs:line 37\n at Api.Utilities.Behaviours.PerformanceBehaviour`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken)\n at Api.Utilities.Behaviours.ValidationBehavior`2.Handle(TRequest request, RequestHandlerDelegate`1 next, CancellationToken cancellationToken)\n at Api.Controller.Products.V1.ProductsController.GetFitAndProper(GetFitAndProperQuery request, CancellationToken cancellationToken) in /src/Api/Controller/Products/V1/ProductsController.cs:line 53\n at lambda_method954(Closure , Object )\n at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.AwaitableObjectResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeActionMethodAsync>g__Logged|12_1(ControllerActionInvoker invoker)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeNextActionFilterAsync>g__Awaited|10_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Rethrow(ActionExecutedContextSealed context)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeInnerFilterAsync>g__Awaited|13_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeFilterPipelineAsync>g__Awaited|20_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)\n at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)\n at Microsoft.AspNetCore.Routing.EndpointMiddleware.<Invoke>g__AwaitRequestTask|6_0(Endpoint endpoint, Task requestTask, ILogger logger)\n at Microsoft.AspNetCore.Authorization.AuthorizationMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.ClaimsMiddleware.Invoke(HttpContext context, IUserService userService)\n at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.SwaggerUiIndexMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.RedirectToIndexMiddleware.Invoke(HttpContext context)\n at NSwag.AspNetCore.Middlewares.OpenApiDocumentMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.SwaggerBasicAuthMiddleware.InvokeAsync(HttpContext context)\n at Microsoft.AspNetCore.ResponseCompression.ResponseCompressionMiddleware.InvokeCore(HttpContext context)\n at Api.Utilities.Middleware.RequestBodyMiddleware.Invoke(HttpContext context)\n at Api.Utilities.Middleware.LoggingMiddleware.Invoke(HttpContext context)",
"FileName": null,
"MethodName": "Api.Client.ThirdParty.Integration.V1.IntegrationClient+<IntermediaryAccreditationAsync>d__15",
"Line": 0,
"Data": null
},
"RequestBody": null,
"Additional": null
}
{

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...