Splunk Search

regex to extract "WFLY*:"

indeed_2000
Builder

Hi

What is the regex for this "WFLY*:"

I want to get all jboss error code start with (WFLY) and (star wildcard) till colon. 

here is the sample log:

2021-07-11 23:59:02,091 ERROR APP [ACTION] WFLYEJB0034: EJB Invocation failed on component Module for method public common.platform string.platform

 

Any idea

Thanks,

Labels (7)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"

View solution in original post

Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!