Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About kostasKats
kostasKats
Explorer
Member since:
06-15-2015
06-05-2020
Community Statistics
| Posts | 16 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 2 |
| Member Since | 06-15-2015 |
Activity Feed
- Karma Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? for aholzel. 06-05-2020 12:47 AM
- Karma Re: How can I extract the 3 or 5 digit number and 2 3-letter words after "Request" in my sample log? for reed_kelly. 06-05-2020 12:47 AM
- Got Karma for How can I extract the 3 or 5 digit number and 2 3-letter words after "Request" in my sample log?. 06-05-2020 12:47 AM
- Got Karma for How can I extract the 3 or 5 digit number and 2 3-letter words after "Request" in my sample log?. 06-05-2020 12:47 AM
- Posted Re: How to extract data from a line containing words with "/" between them? on Splunk Search. 08-06-2015 02:14 AM
- Posted Re: How to extract data from a line containing words with "/" between them? on Splunk Search. 08-05-2015 04:40 AM
- Posted Re: How to extract data from a line containing words with "/" between them? on Splunk Search. 08-05-2015 03:52 AM
- Posted How to extract data from a line containing words with "/" between them? on Splunk Search. 08-05-2015 02:43 AM
- Tagged How to extract data from a line containing words with "/" between them? on Splunk Search. 08-05-2015 02:43 AM
- Tagged How to extract data from a line containing words with "/" between them? on Splunk Search. 08-05-2015 02:43 AM
- Tagged How to extract data from a line containing words with "/" between them? on Splunk Search. 08-05-2015 02:43 AM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 08-05-2015 01:23 AM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-22-2015 05:27 AM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-22-2015 01:29 AM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-20-2015 11:52 PM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-20-2015 07:34 AM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-19-2015 11:54 PM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-13-2015 04:37 AM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-10-2015 08:51 AM
- Posted Re: How can I extract text between 2 standard texts that may contain " . , ? / " ? on Splunk Search. 07-10-2015 08:36 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 2 |
08-06-2015
02:14 AM
Got it! Thank you very much for your advice's Jeff I will keep in mind the code-button next time I will post here.
... View more
08-05-2015
04:40 AM
Thank you again jeffland,
What do you mean by: "Also, please post regexes as code here on splunk answers - otherwise the markup will mess them up" ?
Do you mean the tag I used for the question?
... View more
08-05-2015
03:52 AM
Thank you very much jeff it worked perfect!
I would check https://regex101.com/, but do you have any sites/sources that have dictionary or anything else that would help me learn how to use the regex from the start?
I would like to learn how to use those commands: "\/\/[^\/]+"! At the time being I know/understand only the basic structure like:
\d
\D
\w
\W
... View more
08-05-2015
02:43 AM
I have the below line :
Parameters: {"referrer"=>"http://www.xxxxx.net/transport_deeplink/4.0/EE/en-gb/EUR
and I want to use a regex command (rex field=_raw) in order to count them by:
domain: http://www.xxxxx.net
country: EE
language: en-gb
currency: EUR
Can please someone help me with this?
... View more
08-05-2015
01:23 AM
Dear aholzel I want your help again with something else:
Parameters: {"referrer"=>"http://www.xxxxx.net/transport_deeplink/4.0/EE/en-gb/EUR
I have this line and i want ot use a regex command (rex field=_raw) in order to count them by:
domain: http://www.xxxxx.net
country: EE
language: en-gb
currency: EUR
Can you please help me with this?
... View more
07-22-2015
05:27 AM
Thank you very very much! This worked perfect!
... View more
07-22-2015
01:29 AM
Empty results again! 😞
https://www.diigo.com/item/image/564dw/ytbe
... View more
07-20-2015
11:52 PM
I am using this splunk version: 5.0.2, build 14956
It comes empty!! really appreciate your willingness to help out!
... View more
07-20-2015
07:34 AM
I thought that it worked but since I can not use stats count it showed me that it didn't!
... View more
07-19-2015
11:54 PM
Unfortunately it did not work. If I had to guess, I would say that the extracting method is not working.
It should have worked as it was:
... | rex "IssuingBank:(?P.+).*?IssingCountry:(?P\w+) IRF: (?[ \w]+) CardProfile1:(?\w+) CardProfile2:(?P\w+)" | stats count by bank, issingcountry, IRF, cardProfile1
... View more
07-13-2015
04:37 AM
Hello,
I used exactly what you proposed without the stat command and it seemed to work! But my initial purpose is to count them and export them into excel!
Do you have any idea how can I count them?
... View more
07-10-2015
08:51 AM
I used this: (like before, I miss typed what I used!)
rex "IssuingBank:(?P.+).*?IssingCountry:(?P\w+) IRF: (?[ \w]+) CardProfile1:(?\w+) CardProfile2:(?P\w+)" | stats count by bank, issingcountry, IRF, cardProfile1
And it did not work: No results found. Inspect ... !
... View more
07-10-2015
08:36 AM
Unfortunately it did not work!
The log is :
row1.....
row2....
row3....
row4....
18:00:19,727 INFO FlightsCostBasedGatewaySorter 5fd00a8d271411e598e306695ac8a534 BinInfo for Bin:656814 IssuingBank:SANTANDER, UK ?PLC IssingCountry:GB IRF:Intra EEA CardProfile1:Consumer CardProfile2:Base
I used this:
rex field=_raw "IssuingBank:(?P.+).*?IssingCountry:(?P\w+) IRF: (?[ \w]+) CardProfile1:(?\w+) CardProfile2:(?P\w+)" | stats count by bank, issingcountry, IRF, cardProfile1
... View more
07-10-2015
07:35 AM
I have this type of log:
Bin:456852 IssuingBank:PBS INTERNATIONAL A/S;DANSKE BANK;DANSKEBANK IssingCountry:DK IRF: Intra EEA CardProfile1:Consumer CardProfile2:Base
How can I extract : bank, issingcountry, IRF, Cardprofile1, CardProfile2? and then stats count by bank, issingcountry,IRF, Cardprofile1....
Can anyone please help me with this? anything I found in the forum did not work!
I tried something like this but I suppose I need sth upper level regex!
rex field=_raw "IssingCountry:(?<issingcountry>\w{2})" | rex field=_raw "IssuingBank:(?<bank>\w{13})"
... View more
- Tags:
- regex
06-15-2015
06:31 AM
Thank you very much all!
This worked perfect for my work:
"Blocked Incoming Request" |rex field=_raw "Request (?\d+)-(?\S+)" |stats count by aid, word
... View more
06-15-2015
06:01 AM
2 Karma
The log is:
2015-06-15 15:50:29,381 ws prd 62 WARN JourneySearch # # # # Blocked Incoming Request 13360-PSA-LIS
I have used this for the 3/5 digit number, but I want know to extract the words after the number:
rex field=_raw " Blocked Incoming Request (?<aid>\d+)"
Can someone help me please?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
