Splunk Search

regex to extract "WFLY*:"

indeed_2000
Motivator

Hi

What is the regex for this "WFLY*:"

I want to get all jboss error code start with (WFLY) and (star wildcard) till colon. 

here is the sample log:

2021-07-11 23:59:02,091 ERROR APP [ACTION] WFLYEJB0034: EJB Invocation failed on component Module for method public common.platform string.platform

 

Any idea

Thanks,

Labels (7)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...