Hi,
i have an event like below after ms there is a line break and some other text.
i want to capture that time. i have tried the below expression but it did not work. Any suggestions?
INFO: Server will startup in 2131 ms
sdfsfsdfsdfsff
expression i have used: rex field=_raw "(?i) .? Server will startup in (?P
Just needed a slight adjustment to your regex:
(?P<fieldname>\d+)(?=\sms)
Thx for the input. i have tried the other solution and it worked.
INFO: Server will startup in (.*)
I tried it in pythex and it worked
Just needed a slight adjustment to your regex:
(?P<fieldname>\d+)(?=\sms)
Thx. This worked