I have some logs in the format below (multiple lines in each log). Note that there are spaces on the start of each line.
SPACES purchAmount: 6300
SPACES currency: 978
I am using the following regex to extract a field (I would replicate this for other fields):
It doesn't seem to work. Could anyone help with this?
go through the below link,
Hope it will help your concerns as it automatically creates the field extraction as per your requirement.
I have used the regex extractor on many other logs. However, when I try to use it on this multiline log, I get the following error:
'The extraction failed. If you are extracting multiple fields, try removing one or more fields. Start with extractions that are embedded within longer text strings.'
You should be able to extract your fields with
for purchAmount and so forth. Try your regexes online, for example at regex101 - it helps a lot!