Splunk Search

regex to extract "WFLY*:"

indeed_2000
Motivator

Hi

What is the regex for this "WFLY*:"

I want to get all jboss error code start with (WFLY) and (star wildcard) till colon. 

here is the sample log:

2021-07-11 23:59:02,091 ERROR APP [ACTION] WFLYEJB0034: EJB Invocation failed on component Module for method public common.platform string.platform

 

Any idea

Thanks,

Labels (7)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
| rex "(?<error>WFLY[^:]+):"
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...