Splunk Search

regex to extract "WFLY*:"

indeed_2000
Motivator

Hi

What is the regex for this "WFLY*:"

I want to get all jboss error code start with (WFLY) and (star wildcard) till colon. 

here is the sample log:

2021-07-11 23:59:02,091 ERROR APP [ACTION] WFLYEJB0034: EJB Invocation failed on component Module for method public common.platform string.platform

 

Any idea

Thanks,

Labels (7)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...