Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Field extraction

$
0
0

hi,

I want to extract a particular word and add it to a calculated field from a message field i have a share point server log

sample entries are

04/02/2013 00:41:51.82  w3wp.exe (0x2324)                           0x1D5C  SharePoint Foundation           General                         8e2r    Medium      Possible mismatch between the reported error with code = 0x81070504 and message: "There is no Web named "/IndiaAccountsCommunity/IndiaCommunityAccounts/Future Generali/_vti_bin/lists.asmx"." and the returned error with code 0x80070002. 104159c7-12e1-44b6-b4f5-5141ddaf3ea1
04/02/2013 00:35:32.94  OWSTIMER.EXE (0x0758)                       0x2CB8  SharePoint Foundation           Usage Infrastructure            bjb7    High        Call to WSS ImportEntries method with '65' entries failed for usage definition 'Microsoft.SharePoint.Administration.SPRequestUsageDefinition'. Entries will now be redirected to ULS logs (level=Verbose). Error message: An entry with the same key already exists.    3bb778c7-24f3-4d54-abcb-20069b71d953

it can be an error or ERROR or Error everything should be extracted as a single field tried with regex,rex and eval match not able to do it.

thanks in advance


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>