About cpatadobe

cpatadobe · ‎11-18-2019

What do you mean "The log should be one line until?" Do you mean that everything from the "Application Name:" through the line starting with the date is supposed to be the event? Or do you mean something else?

cpatadobe · ‎09-13-2019

Something like this will work with your dataset: (\d{5,}.\d{5,}.\d+\.\d+)

cpatadobe · ‎08-12-2019

Have you looked at this article: https://answers.splunk.com/answers/52753/extraction-of-an-indexed-field-in-summary-indexes.html Is your situation very similar?

cpatadobe · ‎05-27-2019

If this works for you, @hthiel, please accept the answer so that others will know that this is a good answer.

Posts	4
Solutions	1
Karma Given	1
Karma Received	0
Member Since	‎03-01-2019

Online Status	Offline
Date Last Visited	‎04-07-2022 11:43 PM

Re: How to wrap a regex multiline event to form a ...

Re: help with regex

Re: Index Time Fields Extraction on Summary Index

Re: Scheduled PDF delivery from dashboards not bei...