Log - (given 2 lines for example)
2017/02/21 03:46:12.119-0800 [http-bio-8480-exec-3] C3AF4B3F9C2E40D2006D1513C81191A6.pppxwbtect014 INFO c.e.c.w.b.r.ShirtsSaleResource - #xHoster# #**res_ShirtServiceTosite**# ShirtsSaleResource.getLossier , URI -> /{1856659} , Time taken to get JSON -> **58** milliseconds
2017/02/21 03:46:08.489-0800 [http-bio-8480-exec-2] 82F757837394C2E950AEB9A47043DD61.pppxwbtect010 INFO c.e.c.p.m.i.CmppRestClientImpl - #xHoster# #**res_CmppToShirtService**# CmppRestClientImpl.prepareChange , URI -> http://ppp-Shirteu.ch.expeso.com:52008/order/PrepareChange , Time taken to get XML response -> **178** milliseconds
Expected output :
Field1 Field2
res_ShirtServiceToSite 58
res_CmppToShirtService 178
I tried :
index=app source=/var/log* "#xHoster#" | rex field=_raw res_(?.*)# | rex field=_raw .\-\>\s(?.*)\smilliseconds |table ptype,ptime
... View more