×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
dictudatacom
New Member
Member since: ‎06-29-2012
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎06-29-2012
Activity Feed
Topics I've Started
View All

Re: extract subject from maillog

by in Splunk Search
‎07-02-2012 01:55 AM
‎07-02-2012 01:55 AM
Hi Ayn, here is a sample of the logfile, I want to extract the subject: Mon Jul 2 10:20:38 2012 Info: Start MID 62771585 ICID 33896658 Mon Jul 2 10:20:38 2012 Info: MID 62771585 ICID 33896658 From: <*****> Mon Jul 2 10:20:38 2012 Info: Delivery start DCID 24405838 MID 62771584 to RID [0] Mon Jul 2 10:20:38 2012 Info: MID 62771585 ICID 33896658 RID 0 To: <*> Mon Jul 2 10:20:38 2012 Info: MID 62771585 Message-ID '[email protected]' Mon Jul 2 10:20:38 2012 Info: MID 62771585 Subject 'FW: Postbus AgroFood vanaf vrijdag 17:00 VOL: opnieuw inzenden!!' Mon Jul 2 10:20:38 2012 Info: MID 62771585 ready 19724 bytes from <****> Mon Jul 2 10:20:38 2012 Info: MID 62771585 matched all recipients for per-recipient policy DEFAULT in the outbound table Mon Jul 2 10:20:38 2012 Info: MID 62771585 interim AV verdict using Sophos CLEAN Mon Jul 2 10:20:38 2012 Info: MID 62771585 antivirus negative ... View more

extract subject from maillog

by in Splunk Search
‎06-29-2012 02:47 AM
‎06-29-2012 02:47 AM
Hi, I want to extract the 'subjects' from my SMTP maillog but the regex I have built doesn't seem to work. I have built the same type of regex to extract the FROM en TO fields and that works so I'm puzzled why it doesn't extract the subjects... Regex looks like this: (?i) subject <(?P [^>]*) Can anyone help me out ? Thanks in advance! ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM