About VRP136

VRP136 · ‎10-09-2024

I have two rex queries and want know how to combine Query : 1 index=test1 sourcetype=teams | search "osversion=" | rex field=_raw "\s+(?<osVersion>.*?)$" | table Time(utc) "OSVersion" output : time osversion 1.1 123 1.2 1234 1.3 12345 1.4 123456 Query : 2 index=test1 sourcetype=teams | search "host=12* | rex field=_raw "\w+(?<host>*)$" | table Time(utc) "OSVersion" output : time host 1.1 abc 1.2 abcd 1.3 abcde Pls help me how to combine above queries and should show table like below time osversion host 1.1 123 abc 1.2 1234 abcd 1.3 12345 abcde

VRP136 · ‎08-29-2024

This worked , Thank you so much @dural_yyz24

VRP136 · ‎08-29-2024

No luck ,

VRP136 · ‎08-28-2024

Below is my raw log [08/28/2024 08:14:50] Current Device Info ... ****************************************************************************** Current Mode: Skull Teams Current Device name: xxxxx Crestron Package Environment version :1.00.00.004 Crestron Package Firmware version :1.17.00.040 Crestron Package Flex-Hub version :1.3.0127.00204 Crestron Package HD-CONV-USB-200 version :009.051 I want extract only : Crestron Package Firmware version :xx.xx.xxx I wrote a query like bleow , but not working , pls help index=123 sourcetype = teams | search "Crestron Package Firmware version :" | rex field=_raw ":\s+(?<CCSFirmware>.*?)$" | eval Time(utc)=strftime(_time, "%y-%m-%d %H:%M:%S") | table host Time(utc) CCSFirmware

Posts	4
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎08-28-2024

Online Status	Offline
Date Last Visited	‎10-09-2024 12:09 PM

How to combain two rex

Table using regex

How to combain two rex

Re: Table using regex

Re: Table using regex

Table using regex

Join the Conversation

How to combain two rex

Table using regex

How to combain two rex

Re: Table using regex

Re: Table using regex

Table using regex