Hi I have a similar issue, please help my events are as follows
@@XYMONDCHK-V1||hostabc|disk|10.100.40.91|green||green|1582637372|1580141124|1582639172|0|0||0|status qwehwac01.disk green Tue Feb 25 06:29:58 MST 2020 - Filesystems ok\nFilesystem 1024-blocks Used Available Capacity Mounted on\ntmpfs 32894796 76 32894720 1% /dev/shm\ntmpfs 32894796 58624 32836172 1% /run\ntmpfs 32894796 0 32894796 0% /sys/fs/cgroup\n/dev/mapper/rhel-root 116457924 2866116 113591808 3% /\n/dev/sda1 1038336 234404 803932 23% /boot\n|||0|0
where i need overview data extracted as:
||hostabc|disk|10.100.40.91|green||green|1582637372|1580141124|1582639172|0|0||0|status qwehwac01.disk green Tue Feb 25 06:29:58 MST 2020 - Filesystems ok
Drill down data extracted as:
Filesystem 1024-blocks Used Available Capacity Mounted on\ntmpfs 32894796 76 32894720 1% /dev/shm\ntmpfs 32894796 58624 32836172 1% /run\ntmpfs 32894796 0 32894796 0% /sys/fs/cgroup\n/dev/mapper/rhel-root 116457924 2866116 113591808 3% /\n/dev/sda1 1038336 234404 803932 23% /boot\n
in above event we can skip headers Filesystem 1024-blocks Used Available Capacity Mounted on and hardcode it... we can see overview data delimited by | and detailed by \n. Could someone please help me extract this using props.conf
... View more