Tried this on both the Forwarder & indexer without success, what am i missing ? Log output SignUpState='3.30' SSN='555555555' desired output SSN='xxxxxxxxx'. Tried this on both the Forwarder & indexer without success, what am i missing ? Props.conf [source:://e:\trs\log\accountweb\aw*.log] SEDCMD-SSN = s/SSN=\d{9})/SSN=xxxxxxxxx\1/g Props.conf [source:://e:\trs\log\accountweb\aw*.log] TRANSFORMS-anonymize = ssn-anonymizer, ssnlookup-anonymizer Transforms.conf: [ssn-anonymizer] REGEX = (?m)(^|)SSN=($|['])[0-9]{9}($|[']) FORMAT = $1SSN=#########'$2 DEST_KEY = _raw [ssnlookup-anonymizer] REGEX = (?m)(^|)SSNLookup=($|['])[0-9]{9}($|[']) FORMAT = $1SSNLookup=#########'$2 DEST_KEY = _raw ... View more

Hi, Newbie in regex, would like help to add a line after transactionid=XXXXXX. My props looks like this: [source::/nyx/nogscore/log/nogscore-*] SHOULD_LINEMERGE=False BREAK_ONLY_BEFORE_DATE=false LINE_BREAKER_LOOKBEHIND=500 LINE_BREAKER=(transactionid=[0-9]+) DATETIME_CONFIG=CURRENT LOG: NNNN :000.01| 06:37:15 [4067241XXX] ws_proc.cpp:1002 - INFO : 00 NOGS::wallet version match: 1.2 NNNN :000.00| 06:37:15 [40672414XXX] ws_api12.cpp:279 * CHECK : 10 NOGS:::#name=wager;accountid=2-4410XXX-USD,USD;activationid=;apiversion=1.0;betamount=0.06;campaignid=;clienttype=html5;currency=USD;gpgameid=doctorlove;gpid=100;jpc=;loginname=XXX;opid=XXX;password=XXX;request=wager;roundid=529233;sessionid=0000000CEDE13001c099559651a5ca63d5d325bde65907e3e55683dca0338159965a2fc1c2bfb311;transactionid=1268348 (Like a new line after this) NNNN :000.01| 06:37:15 [4059315XXX] ws_proc.cpp:1002 - INFO : 00 NOGS::wallet version match: 1.2 NNNN :000.00| 06:37:15 [4059315XXX] ws_api12.cpp:606 * CHECK : 10 NOGS:::#name=result;accountid=2-44101XXX-USD,USD;apiversion=1.0;clienttype=html5;currency=USD;gamestatus=completed;gpgameid=doctorlove;gpid=100;houseincome=;jpwonamount=;loginname=XXX;opid=XXX;password=XXXX;request=result;roundid=529233;sessionid=0000000CEDE13001c099559651a5ca63d5d325bde65907e3e55683dca0338159965a2fc1c2bfb311;transactionid=1268349;wonamount=0.00 ... View more