Splunk Search

How do I extract this value from my sample data?

javaj2e11
New Member

How to extract fdd1895d-63e9-4be2-b78b-ec784b00754f from below:

2016-04-28 15:12:56,939 GMT [transaction_id=201604281112405695][abc-transaction-Id=bf9f140b-09fd-48e5-9555-b8322865a7e3][host_name=xyx] [caller_name=pqr] [request_uri=/abc/def/1.0/ghi/jkl/{id}] [] INFO com.abc.def.ghi.Helper Firing an event to get the results as all operations are in COMPLETE status for Callback Id : fdd1895d-63e9-4be2-b78b-ec784b00754f

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

This regex string will do it.

Callback Id : (?<callbackId>[\w\-]*)
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...