cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
Manth
Explorer
Member since: ‎09-22-2022
‎10-19-2022
Community Statistics
Posts 6
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎09-22-2022
Activity Feed
View All

Re: Reg - how to extract and display in a table fo...

by in Splunk Search
‎10-19-2022 10:14 AM
‎10-19-2022 10:14 AM
Thank you for your quick response. However, I would like to display key value fields in table where field delimiter is "|" and key-value delimiter is "=". Please advise. ... View more

How to extract and display in a table form?

by in Splunk Search
‎10-18-2022 01:40 PM
‎10-18-2022 01:40 PM
I have splunk logs as given below. However, I wanted display fields in between square brackets "[ ]" in a table as given below. Please advise. Expeted query result in a table sqsMsgId                                                                        | snsMsgId                                                                        | requestId dec6c564-9e1c-4d0f-8e5e-ac9dc7bdf14a  | 7d81b4cf-43c0-5bb4-8370-ef064a78da16 | d487108c-863f-5ab2-96df-4b458f97c74e My splunk Logs {"level":"info","message":"[sqsMsgId=dec6c564-9e1c-4d0f-8e5e-ac9dc7bdf14a | snsMsgId=7d81b4cf-43c0-5bb4-8370-ef064a78da16 | workItemKey=CAMP:MI4:ORG_ID:103857:7fbf0f46-4131-404d-9a13-57cdff7c473a | requestId=d487108c-863f-5ab2-96df-4b458f97c74e | status=SUCCESS | ags=CAMP | component=MI4 | duration=383]","requestId":"d487108c-863f-5ab2-96df-4b458f97c74e"} ... View more
Labels

Re: how to extract a specific work from splunk log...

by in Getting Data In
‎10-18-2022 01:25 PM
‎10-18-2022 01:25 PM
Thank you @gcusello  ... View more

Re: how to extract a specific work from splunk log...

by in Getting Data In
‎09-23-2022 09:05 AM
‎09-23-2022 09:05 AM
Thank you @gcusello . When I have my splunk query as below, I was expecting Status in the SELECTED FIELDS, however, I don't see the Status filed in the left menu. Am I doing anything wrong here. Please advise. index=application source="aws:lambda"  | rex "\\"status\\":(?<Status>\w+)}\""   ... View more

How to extract nth word in a string with a hyphe...

by in Getting Data In
‎09-22-2022 01:12 PM
‎09-22-2022 01:12 PM
I wanted to extract nth word in string with a hyphen delimiter from the following strings that are 3rd and 6th words as highlighted below.   KXTWRKTG-wsmp-t4-lambda-nodejs-PROD-100 KXTWRKTG-phl-resolvers-lambda-nodejs-QAINT2-302 ... View more
Labels

How to extract a specific work from Splunk logs?

by in Getting Data In
‎09-22-2022 01:02 PM
‎09-22-2022 01:02 PM
I would like to extract status value (i.e. 201) highlighted below using RegEx in the following link. However, it didn't work. Please advise https://regex101.com/r/QIB8EG/1 Rex \"status\":(?<status>[^\}])\",\"requestId\":   {"level":"debug","message":"handler result : {\"body\":\"{\\\"numberOfProcessedRecords\\\":1}\",\"status\":201}","requestId":"ecd06f97-975b-5faf-81a0-3431fb4d1070"} ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎10-19-2022 02:17 AM
Karma given to
View All