×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
cdpascariu
Engager
Member since: ‎04-10-2017
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 2
Member Since ‎04-10-2017
Topics I've Started
No posts to display.
View All

Re: Issue using the field extractor

by in Splunk Search
‎05-05-2023 09:32 AM
‎05-05-2023 09:32 AM
Pretty close. This one worked for me.  | rex field=_raw "statement:(?<statement>[^^$]+)" ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma from
View All