Hi Splunkers,
I have pre-existed field know as "source" whose values are
1> /var/tomcat/instance15/logs/catalina.out
2> /var/tomcat/instance06/logs/catalina.out
3> /var/tomcat/instance11/logs/catalina.out
What i need to do is to extract instance15, instance06,instance11 from it and put those all values in under new field called as "Instances"
Please help me in getting the rex expression for it .
Note : The instance number is subjected to change it might be 12, 13 any double number .
Thanks in advance
... View more