I have a event as below
nam=this is org name;
-this is hyta name;
-this is hju name;
falu= this is gao name
I need to match multiple lines. until the line "falu=". May I know how to match multiple lines.
@ankithreddy777 - Did one of the answers below help provide a solution your question? If yes, please click “Accept” below the best answer to resolve this post and upvote anything that was helpful. If no, please leave a comment with more feedback. Thanks.
You need to specify multiline
like this:
Your Base Search | rex "(?ms)name=(?<YourField>(.+)[\r\n]+falu="
Give this a try
your base search | rex "name=(?<YourField>(.+[\r\n]+)falu="