HI All, PLease help in extracting the below logs as per the conditions stated key1=value1,key2=value2\,key 3=value3\,value4\,value5\,value6\,key4={key5=value5\,key6= value6\,},key7=val10(key8=val11\,key9=val12),key20=val20 i have a log of the above format i want to extract key value pairs without backslash also key 3=value3\,value4\,value5\,value6\,  is a multivalue field and should be extracted  as  :- key 3=value3,value4,value5,value6 and key4={key5=value5\,key6= value6\,}, is a json object  which should be extracted as:-   key5= value5 , key6= value 6(i.e key 4={ should not be extracted)  and key7=val10(key8=val11\,key9=val12) should be extracted individually as :- key7=val10 ,key8=val11,key9=val12   ... View more

Hi all, I have 10 events containing events from events 1,event2,event 3,....event 10. I need to cobine events2,3,4 and events 7,8 into one event each i.e one event for 2,3,4 and one event for 7,8. Rest all i dont need to index(send to null queque) How can we do this on index time. Please help ... View more