trying to use rex to get the contents for the field letterIdAndDeliveryIndicatorMap. For example, Logged string letterIdAndDeliveryIndicatorMap=[abc=P, efg=P, HijKlmno=E] I want to extract the cont...
See more...
trying to use rex to get the contents for the field letterIdAndDeliveryIndicatorMap. For example, Logged string letterIdAndDeliveryIndicatorMap=[abc=P, efg=P, HijKlmno=E] I want to extract the contents between the [] , which is abc=P, efg=P, HijKlmno=E and then find stats on them. I was trying something like rex field=_raw "letterIdAndDeliveryIndicatorMap=\[(?<letterIdAry>[^\] ]+)" but, its not working as expected. Thanks in advance!