regx

[Siddharthnegi]

Hi , I want to extract this line from an event.
RAISE-ALARM:acProxyConnectionLost: [KOREASBC1] Proxy Set Alarm Proxy Set 1 (PS_ITSP): Proxy lost. looking for another proxy;

[gcusello]

Hi @Siddharthnegi ,

could you share some sample of your full message, highlighting in bold the part to extract?

Ciao.

Giuseppe

[Siddharthnegi]

I want to extract whole line till proxy
RAISE-ALARM:acProxyConnectionLost: [KOREASBC1] Proxy Set Alarm Proxy Set 1 (PS_ITSP): Proxy lost. looking for another proxy;

[ITWhisperer · Accepted solution]

Try something like this

| rex "^(?<line>.*proxy)"

[Siddharthnegi]

what if  I want to remove RAISE-ALARM from staring

[ITWhisperer]

| rex "^RAISE-ALARM(?<line>.*proxy)"