Hi, I am trying to extract a corId from the log and find the length of the corId. when searching am able to successfully locate the Cor Id however when evaluating its lengths, I am not able to succeed. I used the search query as below corId | eval length=len(corId) the actual log file is as below: ExecuteThread: '10' for queue: 'weblogic.kernel.Default (self-tuning)'> < > <> <> <1334795010998> < [RouteNodeAccountContactdetails, null, null, REQUEST] Header in request node of getAccountContactDetails Service: 123/wsa:MessageID portal 10.117.215.8 123 /wsa:From E8813354426S36 /S:Header> <19/04/2012 10:23:25 AM EST> <[ACTIVE] ExecuteThread: '30' for queue: 'weblogic.kernel.Default (self-tuning)'> < > <> <> <1334795005278> < [RouteNodeUserDetails, null, null, REQUEST] Header in request node of getUsersDetails Service: 123/wsa:MessageID please help. ... View more