I am getting the file path in my search result. When I am displaying it in dashboard with chart, I need to only extract the file name, not the complete path.
Current output:
/app/wlprd11g/instances/csweb1020/logs/csweb1020_access.log
/app/wlprd11g/instances/csweb1021/logs/csweb1021_access.log
/app/wlprd11g/instances/csweb1022/logs/csweb1022_access.log
/app/wlprd11g/instances/csweb1023/logs/csweb1023_access.log
Desired output:
csweb1020_access.log
csweb1021_access.log
csweb1022_access.log
csweb1023_access.log
I used substr function and got the expected result.
... | eval source=substr(source,40)
I used substr function and got the expected result.
... | eval source=substr(source,40)
Try this.
... | rex "(?:\/?.+\/)*(.+?)$" | ...