Trying to extract field in log file, can you please help with regex and field extraction.

[PavanSeerapu]

Caused by: java.sql.SQLException: Io exception: Socket closed

i want to extract "java.sql.SQLException"

Can you please do the needful.

[scelikok]

Hi @PavanSeerapu,

This regex does not work, because there is a problem with double-quotes and there is no numeric value. Please try below;

| rex "java.sql.SQLException:\s+(?<SQLexception>.*)"

[PavanSeerapu]

| rex field=_raw "Caused by"\:\s+(?P<SQLexception>\d+)

I tried this but didn't work

[scelikok · Accepted solution]

Hi @PavanSeerapu,

You can use below rex command;

| rex "[^:]+:\s+(?<exception>[^:]+)"