I am trying to get regex working for a field extraction on some SSRS logs I have indexed in our deployment. My goal is to extract the data after INFO: . So in the below example, I am trying to extract Call to GetSystemPropertiesAction(). as a field I will label as INFO . Here is an example of one of the lines in the index:
library!ReportServer_0-370!3120!04/24/2015-10:49:19:: i INFO: Call to GetSystemPropertiesAction().
When I put the following regex into the regex101 application I extract the correct data:
(?<=INFO:).*
When I try to put that regex expression into the field extraction, it does not return any values in the preview.
... View more