Solved: Re: rex for error number - Splunk Community

Splunk Search

hi

what is the rex for error number and error message of this log: (separately)

23:43:51.411 app module: 100: Not Found!

error number= 100

error message= Not Found!

Thanks

1 Solution

Solution

| rex ":\s+(?<error_number>\d+):\s+(?<error_message>.*)"

View solution in original post

Solution

| rex ":\s+(?<error_number>\d+):\s+(?<error_message>.*)"

Get Updates on the Splunk Community!

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...