Splunk Search

how to extract the message field into multiple fields from windows Message field

srinivasmanikan
Engager

I want to extract the below field into two fields 

i want to extract the Name and version both as two fields can some one help me on this.

srinivasmanikan_0-1720514005069.png

 

 

Labels (3)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @srinivasmanikan ,

could you share a sample of your logs in text format?

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...