Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About lukeandrews
lukeandrews
New Member
Member since:
08-16-2016
06-05-2020
Community Statistics
| Posts | 4 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 08-16-2016 |
Activity Feed
- Posted Re: How to create a regex to capture information from an indexing sourcetype? on Splunk Search. 10-25-2016 09:25 AM
- Posted Re: How to create a regex to capture information from an indexing sourcetype? on Splunk Search. 10-24-2016 06:26 AM
- Posted How to create a regex to capture information from an indexing sourcetype? on Splunk Search. 10-24-2016 04:34 AM
- Tagged How to create a regex to capture information from an indexing sourcetype? on Splunk Search. 10-24-2016 04:34 AM
- Tagged How to create a regex to capture information from an indexing sourcetype? on Splunk Search. 10-24-2016 04:34 AM
- Tagged How to create a regex to capture information from an indexing sourcetype? on Splunk Search. 10-24-2016 04:34 AM
- Tagged How to create a regex to capture information from an indexing sourcetype? on Splunk Search. 10-24-2016 04:34 AM
- Posted How to write the regular expression to extract this field from my sample log structure? on Splunk Search. 08-16-2016 06:22 AM
- Tagged How to write the regular expression to extract this field from my sample log structure? on Splunk Search. 08-16-2016 06:22 AM
- Tagged How to write the regular expression to extract this field from my sample log structure? on Splunk Search. 08-16-2016 06:22 AM
- Tagged How to write the regular expression to extract this field from my sample log structure? on Splunk Search. 08-16-2016 06:22 AM
- Tagged How to write the regular expression to extract this field from my sample log structure? on Splunk Search. 08-16-2016 06:22 AM
Topics I've Started
10-25-2016
09:25 AM
I tried but it didn't work 😞 Should this automatically add values to my interesting fields?
... View more
10-24-2016
06:26 AM
action: "DOC_UPLOAD_DOCUMENTS"; username: "zCarrier4User1"; companyName: "zCarrier 4"; consolidationId: "19882"; shipmentReference: "krish-9165"; vessel: "zCarrier4Vessel1"; vesselImo: "1000004"; taskId: "56838"; consignmentId: "29726"; parcelReference: "45-p-3"; consignor: "zTerminal"; consignee: ""; billOfLadingDate: "8 AUG 2016"; cargo: "Barley edited"; quantity: "121,212 Pounds"; loadingLocation: "zWestwego"; destination: "Visakhapatnam INDIA"; freightForwarder: ""; presentee: ""; financeNumber: ""; endorseeCompanyName: "zTerminal"; endorsementStampType: ""; endorsementType: ""; jSessionId: "0F78869A26215A2AC3800D96DE92CDCC";
This is an example of what I need to extract.
... View more
10-24-2016
04:34 AM
Hi,
I'm struggling to create a regex to capture all the information correctly from a sourcetype we have and make them into interesting fields.
The structure of the logs is:
username: "User1"; companyName: "Company 4"; etc etc
Where there's no information within the field it remains empty "".
When trying it doesn't seem to pick up all results 😞
Please help.
... View more
08-16-2016
06:22 AM
Hey everyone,
I'm trying to add an interesting field to the extraction of one source type.
The log structure is as follows:
Action: Archived DLN
Type: fob
Status: Received DLN
I'm trying to capture the Action field, but I'm getting the error:
The extraction failed. If you are extracting multiple fields, try removing one or more fields. Start with extractions that are embedded within longer text strings.
I'm relatively new to Splunk and Regular expressions, so would really appreciate any assistance.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
