Rex help

[Harish2]

From the below logs i want to capture DIM: data and CONSUMER: data using rex 
i am not sure about rex command  much, please help on this.

2023-01-22 00:12:25,234  update  [data work-0][DIM:  [123445-hfj-347384738748378] DIS:{} OIT: [done] flow: [update] {CONSUMER:  ITT |  CONSUMERID:  | STATE:  START  | REQ: GET  UPDATE} data collected for : itt

2023-01-22 00:12:25,234  update  [data work-0][DIM:  [678965-hfj-987563245678908] DIS:{} OIT: [done] flow: [update] {CONSUMER:  OIM |  CONSUMERID:  | STATE:  START  | REQ: GET  UPDATE} data collected for : OIM

2023-01-22 00:12:25,234  update  [data work-0][DIM:  [094567-hfj-986342345678769] DIS:{} OIT: [done] flow: [update] {CONSUMER:  ANBB |  CONSUMERID:  | STATE:  START  | REQ: GET  UPDATE} data collected for : anbb

[ITWhisperer · Accepted solution]

Without an indication of which part of the event is DIM data and which part is CONSUMER data, I have made a guess. Try this:

DIM:\s+\[(?<DIM>[^\]]+).+CONSUMER:\s+(?<CONSUMER>\S+)