Hello,
How to use Regex in props.conf to extract the fields in the below sample event with source type "syslog".
08/11/17 13:30:34 abckdefrg44 openfep[1123]: [log.c][411]: CPM ALSLLER (ID 5): pin_alarm-DOFRI 22.33.22.5.0 -c 453 1 0 -r 449 0 -v "ONLINE" "FEP" "level Group 33. status" "Status now online"&
Group: level Group 33. status
Status: Status now online
↧
