Thank you for reply, Sorry i missed one thing, Sting 1 is like "*(DC)_String1", when it is showing result it show DC_String1. Is it possible. Example like AZ_String1 or TX_String1 like this.
... View more
Hi Team,
I am trying to search <string1> and <String2> from different lines in same log having 100 lines, if both matched i want to show in result with _time, Sring1, String2. Please assist me.
Sample log is like below
... 66 lines omitted ...
Linexx
Linexx ]: "<string1>"
Linexx <string2>
Result should be link
_time , String1
... View more
Hi I am trying to search two strings in message like "Stopped successfully" and "connected" from 6 host names. Please help me am writing like below Source="WinEventlog:applicaiton" |rex "message\s(?<message>.*).*" |search host like "host1" OR host Like "host2" | search message="stopped succesfully" OR "Connected" |table _time, host, message
... View more