I have this log :
<LST>
<S>Watch</S>
<S>Move</S>
<S>Delete</S>
<S>Flip</S>
</LST>
And I want to extract this part with rex syntax :
<S>Watch</S>
<S>Move</S>
<S>Delete</S>
<S>Flip</S>
But I am not having success , I think is because the specials characters.
Thank you in advance
| rex max_match=0 "(?<attr>\<\w\>\w+\<\/\w\>)"
use \
(back slash)
It works but the outputs is one line, in case I want the sequence (Move Delete Flip) ) in one line, I guess I have to replicate the example. Thank you
....
| eval sequence=mvjoin(attr," ")
try this