If you're trying to parse for a value that includes quotation marks in your log files, you'll need to change your query to avoid just parsing the bit of text insides the quotes. Add a backslash preceding the value that contains quotation marks.
For example, structure your query using:
...| parse "xxx \"*\" "value" as yyy
Comments
1 comment
thanks Amanda. This worked like a charm!
Please sign in to leave a comment.