About Chandrasekhar6

Chandrasekhar6 · ‎12-07-2023

Tq so much

Chandrasekhar6 · ‎12-07-2023

I am getting this error Error in 'rex' command: Failed to initialize sed. Failed to parse the replacement string When I removed double quotes getting this ouput : . type . failed on num

Chandrasekhar6 · ‎12-07-2023

index=cs | rex "Type=(?<type>[a-z]+)" | rex field=AResponse.BResponse.Message mode=sed "s/Ref number+\w+\sfailed on num:*+/NetworkA failed on num: /g" Here I hardcoded NetworkA in second rex but actually its a dynamic value and it should be changed according to value present in field type How to use type value in second rex

Chandrasekhar6 · ‎11-27-2023

I want to change the msg for a log i.e <list > <Header>.....</Header> <status> <Message>Thuihhh_4y3y27y234yy4 is pending</Message> </status> </list> to <list > <Header>.....</Header> <status> <Message>request is pending</Message> </status> </list> how can i achieve using rex+sed commands in splunk

Posts	4
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎11-27-2023

Online Status	Offline
Date Last Visited	‎12-07-2023 05:05 AM

how to use field value present in one rex into a...

having a doubt in splunk query

Re: how to use field value present in one rex in...

Re: how to use field value present in one rex in...

how to use field value present in one rex into a...

having a doubt in splunk query