How to parse _message using regex?

Follow

Unknown

• February 21, 2020 01:57

Hi! Im fairly new to SumoLogic, trying to get the values out of my logs, so I updated my service to show results. Im interested to get visual with Sumologic, so, im trying to get the integer value of the log, in this example '841' to be counted and sorted, in an hourly way. 

14.01.2020 02:00:03.802 *INFO* [works-default-3-org.springframework.context.annotation.Bean.336] org.springframework.context.annotation.Bean Unit Length:: 841

How would the regex look like? Thanks in advance. 

0

• 

  Joseph Plunkett

  • February 23, 2020 16:10

  Are your logs always in this format? If so it would probably be better to use the 'parse anchor' method. 

  0

  Comment actions Permalink

Please sign in to leave a comment.