The dojo of Splunk. Learn, share, teach, mentor.
-
fabio angeletti
- rieti
- Italy
- Share
- Share on Twitter
- Share on Facebook
- Blog Posts
- Discussions (2)
- Events
- Videos
fabio angeletti's Discussions
splunk regex help
3 Replies
i all i'm going crazy to extract field from mysql access log.this is the example source: <13>Nov 5 18:56:25 dnsinterno mysql: 091105 18:56:25 1 Connect UNKNOWN_MYSQL_US@localhost as anonymous o…
Started this discussion. Last reply by Michael Wilde Nov. 9, 2009.
fabio angeletti's Page
Gifts Received
fabio angeletti has not received any gifts yet
Latest Activity
Thanks Fabio... do me a favor. Spread the word that his is a good place to learn and get hard questions answered. The more of us, the better we will be.
you are my hero!!!!!!
thx thx thx!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
First... put this at the end of your search -- which will do the field extraction temporarily just for this search:
| rex "'?(?[^@' ]+)'?@\S+"
(you might have to add "username" as a selected field in the field picker.
Now, to persist it put this…
i all
i'm going crazy to extract field from mysql access log.this is the example source:
Nov 5 18:56:25 dnsinterno mysql: 091105 18:56:25 1 Connect UNKNOWN_MYSQL_US@localhost as anonymous on
Nov 5 15:02:07 dnsinterno mysql: 091105 15:02:07 1 Connec…
Profile Information
- Are you an existing splunk user?
- Free
- What do you do for your day job?
- system admin
Comment Wall
- No comments yet!
Videos
Latest Splunk Community Postings
Loading feed
Latest Splunk Forum Posts
Loading feed
© 2010 Created by Michael Wilde.
Powered by 
.
