Splunk Search

Search output in tabular format

4myexperiment
Explorer

I am looking for help to extract the values from my log files

my log file has a sequence of data as follows

1.){xxxxxxxxxx} - Processing request
Loggeduser: true
Loggedusername: xyz/abc@xxx.com
Loginproviders: xxxxxxxxx

2.){xxxxxxxxxx} - Processing request
Loggeduser: true
Loggedusername: xyz/efg@jkl.com
Loginproviders: xxxxxxxxx

From the above mentioned sequence i am interested in extracting Loggedusername and its value to a tabular form, something as mentioned below
Activity user
Loggedusername xyz/abc@xxx.com
Loggedusername xyz/efg@jkl.com

How can i create a table with useful information as mentioned above.

Tags (1)
0 Karma
1 Solution

4myexperiment
Explorer

Thanks for your help.

infact there was multiple challenges was there which was like after extracting field some more data was need to be extracted in multiple line.I managed to get it solved by using "rex " and "(?m)" search command.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...