I have this rex with an assigned field:
regex _raw="(?<total_GC_time>0?.\d+)"
I'm searching lines like this:
2015-09-10T16:46:31.320-0400: 861067.833: Total time for which application threads were stopped: 0.0010090 seconds
and I'm trying to capture the 0.0... for all lines.
The events come up fine, but when I try to table total_GC_time, all the fields are empty. Is it a problem with the regex _raw call?
... View more