thima
(Himabindu)
December 13, 2022, 8:02am
1
Hi All,
I need to extract few values from the below string
= vlmdpews003.corp.intranet
source = /foss/data/instances/dvarpob/logs/dvar_composite.log
sourcetype = composite:dvar_po
“vlmdpews003.corp.intranet” and “dvarpob”
how to do that
REgards,
Hima
Anil_G
(Anil Gorthi)
December 13, 2022, 8:09am
2
Hi @thima
May I know what are the constant parts in the string and which one are the ones changing always
cheers
thima
(Himabindu)
December 13, 2022, 8:13am
3
vlmdpews003.corp.intranet This is the server name "vlmdpews.corp.intranet will not change number will change 001 to 112
" /foss/data/instances/dvarpob/logs/dvar_composite.log" this path only “dvarpo” is constant
Anil_G
(Anil Gorthi)
December 13, 2022, 9:03am
4
@thima
For extracting vlmdpews003.corp.intranet please try this regex
vlmdpews\d{3}\.corp\.intranet
For extracting dvarpob plese try this
dvarpo[a-zA-Z]
You can use this in matches activity
cheers
system
(system)
Closed
December 16, 2022, 9:03am
5
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.