Dear All
I have set of machine data. When i am trying to extract using field extract i am getting this error.
Note: This regex already extracts for scriptfile_sourcetype and for scriptfile_sourcetype.
Can you anyone please tell me where i am going wrong.
Thanks
gajanan hiroji
This is no error, it's just a note to let you know that another identical extraction exists. There's nothing stopping you from going ahead and use it anyway.
That's a totally different question so it's better to ask that in its own thread.
Yes Ayn but i am not able to extract some of the fields but i m not able to extract last string of the event.
Sample Event
*Noofrenewalnoticesent=1 Channel=Direct Claim=No Policy_Degrade_Upgrade=Degraded Upgarded_degraded_amount=8 Underwriting_AUTO_MAN=Manually MAN175 Underwriting_Time=23 REASON024 *
i want to extract REASONo24 how can i do this?