Good morning Team
i am quite new in splunk and am stuck here currently
trying to extract fields for following strings sourcetype is syslog (The extraction failed. If you are extracting multiple fields, try removing one or more fields. Start with extractions that are embedded within longer text strings.)
MN category\Source: Local databases\r\nRule\Category: TEST CAtegory\r\nRule\Rule type: Test\r\n
field to be selected
MN Category\Source local database
Rule\Category TEST category
Rule\Rule Type: Test
Thank you in advance
... View more