Hi There,
I have below data that i will like to extract as key-value pair from a custom event source i have created.
for example i have
sourcetype=DBData
and in each result i have below data that i will like to extract. the data is in XML format
< Name > username1 < /Name >
< Name > username2 < /Name >
< Name > username3 < /Name >
< Name > username3 < /Name >
I want to call Field Name as UersName and value as per above from the data.
I have tried the Interactive Field Extractor for this source type and added bunch of values as shown above but when i click on generate it give me below errors. I am not good at all with regex as of now. This sounds very simple task i am not sure why IFX is not able to take care of this.
Invalid search job/offset specified. [HTTP 404] https://127.0.0.1:8089/services/search/jobs/1367438277.12976; [{'text': 'Unknown sid.', 'type': 'FATAL', 'code': None}]. Defaulting to using values from the first result of the search string: "" No regex could be learned. Try providing different examples or restriction.
