I am trying to extract info from the _raw result of my Splunk query. Currently my _raw result is:
_raw="2014-02-13 13:02:10,3,VIDEO_STREAMING,CAMERA_6,\"Video has stopped or is intermittent for camera 6='Tool Corral Rear Aisle' on encoder 192.168.2.101.\"
I would like to extract the Camera Name, which in this case is 'Tool Corral Rear Aisle', from the above _raw string.
Can anyone help?
Thanks so much!
... View more