Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About rajasplunk89
rajasplunk89
Engager
Member since:
06-10-2021
09-14-2022
Community Statistics
| Posts | 10 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-10-2021 |
Activity Feed
- Posted Re: Rex command not working on Splunk Enterprise. 09-13-2022 10:26 PM
- Posted Re: Rex command not working on Splunk Enterprise. 09-13-2022 10:05 PM
- Posted Why is my rex command not working? on Splunk Enterprise. 09-13-2022 09:44 PM
- Posted Re: Rex command to Show number values between two fields on Splunk Search. 06-10-2021 01:48 AM
- Posted Re: Rex command to Show number values between two fields on Splunk Search. 06-10-2021 01:44 AM
- Posted Re: Rex command to Show number values between two fields on Splunk Search. 06-10-2021 01:35 AM
- Posted Re: Rex command to Show number values between two fields on Splunk Search. 06-10-2021 01:27 AM
- Posted Re: Rex command to Show number values between two fields on Splunk Search. 06-10-2021 12:58 AM
- Posted Re: Rex command to Show number values between two fields on Splunk Search. 06-10-2021 12:52 AM
- Posted Rex command to Show number values between two fields on Splunk Search. 06-10-2021 12:15 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
09-13-2022
10:05 PM
Error in 'rex' command: Encountered the following error while compiling the regex '"Testcode\S+":\S+"(?<id>[^\]+)\S+"': Regex: missing terminating ] for character class
... View more
09-13-2022
09:44 PM
Hi all, I am trying to extract field ABDEF-999 in the name Id. But its not extracting when I use below commands. Could someone guide on what's the mistake in following rex. |rex field="line" "\"Testcode\":\"(?<id>[^\"]*)\""|table id
Extracting from = \\\"Testcode\\\":\\\"ABDEF-999\\\"
... View more
Labels
- Labels:
-
troubleshooting
06-10-2021
01:48 AM
Thanks a lot It worked Could you please explain the Logic Why so many Back slashes used ? Which backslash avoids which one
... View more
06-10-2021
01:44 AM
Got this error
... View more
06-10-2021
01:35 AM
Still getting the wrong value {"line":"d4a1bdc6f233db7d INFO 2021-06-09 19:35:45,010 [reactor-http-epoll-4] com.test.content.test.external.SnsPayloadEventSender Sent payload event id=daae6ff7-bf8f-5b42-9975-36cca5dfd502 for payload event={\"approvalDate\":\"2021-06-09T19:35:44.670Z\",\"audienceIds\":[\"4282b6b8-56dd-406d-8fbc-165b82a3f4d2\"],\"audienceTargets\":[{\"id\":\"4282b6b8-56dd-406d-8fbc-165b82a3f4d2\",\"type\":null}],\"collectionGroupId\":\"82a74ac1-c527-4470-b7b0-fb5f3ef3c2e2\",\"collections\":[\"90eef6b9-8a55-43cd-9aa8-73d29a55494b\"],\"endSchedule\":\"3000-01-01T19:00:00.000Z\",\"id\":\"52049d5f-23b4-4226-805d-4a210879b0aa\",\"language\":\"es-419\",\"mplace\":\"US\",\"nodeVersion\":null,\"payloadType\":\"thread\",\"preview\":false,\"resourceSubType\":\"thread\",\"resourceType\":\"thread\",\"startSchedule\":\"2021-06-11T21:00:57.000Z\",\"type\":\"PUBLISH\",\"version\":\"1623267340386\"}","source":"stdout","tag":"4d9520571148","attrs":{"application":"test","team":"test"}}
... View more
06-10-2021
01:27 AM
Some values are wrong If I use rex "id\\\\\":\\\\\"(?<id>[^\\\]*)" For example 52049d5f-23b4-4226-805d-4a210879b0aa is not Pulled whereas 4282b6b8-56dd-406d-8fbc-165b82a3f4d2 is getting Pulled {"line":"d4a1bdc6f233db7d INFO 2021-06-09 19:35:45,010 [reactor-http-epoll-4] com.test.content.test.external.SnsPayloadEventSender Sent payload event id=daae6ff7-bf8f-5b42-9975-36cca5dfd502 for payload event={\"approvalDate\":\"2021-06-09T19:35:44.670Z\",\"audienceIds\":[\"4282b6b8-56dd-406d-8fbc-165b82a3f4d2\"],\"audienceTargets\":[{\"id\":\"4282b6b8-56dd-406d-8fbc-165b82a3f4d2\",\"type\":null}],\"collectionGroupId\":\"82a74ac1-c527-4470-b7b0-fb5f3ef3c2e2\",\"collections\":[\"90eef6b9-8a55-43cd-9aa8-73d29a55494b\"],\"endSchedule\":\"3000-01-01T19:00:00.000Z\",\"id\":\"52049d5f-23b4-4226-805d-4a210879b0aa\",\"language\":\"es-419\",\"mplace\":\"US\",\"nodeVersion\":null,\"payloadType\":\"thread\",\"preview\":false,\"resourceSubType\":\"thread\",\"resourceType\":\"thread\",\"startSchedule\":\"2021-06-11T21:00:57.000Z\",\"type\":\"PUBLISH\",\"version\":\"1623267340386\"}","source":"stdout","tag":"4d9520571148","attrs":{"application":"test","team":"test"}}
... View more
06-10-2021
12:58 AM
It worked in Most cases But some cases it pulled entire event Is it Possible to filter even that? What is the logic behind using //// could you please explain that too?
... View more
06-10-2021
12:52 AM
got the following error
... View more
06-10-2021
12:15 AM
How to use Rex command to show Value in between 'Id' and `language` for example 0827ce61-e07c-4b51-a052-681dcc94fa2f to show in table. I tried EREX to generate pattern, it worked in most cases but in some cases failed. Is there any easy way to show the value between 2 fields? Provided the Event sample {"line":"c5fd03529388e8d6 INFO 2021-06-10 04:11:02,966 [reactor-http-epoll-2] com.test.content.test.external.SnsPayloadEventSender Sent payload event id=9a67e81d-5ae3-5e84-b1f7-b126c9f5c787 for payload event={\"approvalDate\":\"2015-06-10T04:11:02.128Z\",\"adenceIds\":[],\"adenceTargets\":[],\"collGroupId\":\"008be467-6c78-4079-94f0-70e2d6cc4003\",\"collections\":[\"d879aa85-698c-41a1-b066-a8ecdf6b8a9c\",\"d879aa85-698c-41a1-b066-a8ecdf6b8a9c\"],\"endSchedule\":\"3000-01-01T19:00:00.000Z\",\"id\":\"0827ce61-e07c-4b51-a052-681dcc94fa2f\",\"language\":\"ja\",\"mplace\":\"JP\",\"nodeVersion\":null,\"payloadType\":\"thread\",\"preview\":false,\"resourceSubType\":\"thread\",\"resourceType\":\"thread\",\"startSchedule\":\"2021-03-26T22:00:28.000Z\",\"type\":\"P\",\"version\":\"1622644250765\"}","source":"stdout","tag":"21c5897e605c","attrs":{"application":"test","team":"test"}}
... View more
Labels
- Labels:
-
rex
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-14-2022
12:03 AM
|
