ERROR - *(somedata).
FlatFile ERROR - 2649 BUSINESS_LOGIC
ERROR - More than 1 primary id found for the given offering
i wants to find errors type by some data
Try like this
your base search (e.g. index=foo sourcetype=bar "ERROR")
| rex "ERROR - (?<Error_Message>.+)"
| stats count by Error_Message
Hi
All logs are bellow format ,i wants to chart over unique errors ,and count of each error.
ERROR - More than 1 primary id found for
ERROR - 75785 BUSINESS_LOGIC The number
ERROR - something
Could you provide more information on your requirement here? You want to just filter the events which has error in formation ERROR - <<errormessage>>
?