Need Help With Sentinel Regex

@msef280 

 

If you want to extract multiple columns out from a single string (which I think is what you want to do), you could use the parse command

 

| parse ACTUALTEXT with * “TIME_GENERATED =” Time “]” *

| parse ACTUALTEXT with * “RECORD_NUMBER =” RecordNumber “]” *

| parse ACTUALTEXT with * “EVENT_TYPE =” EventType “]” *

 

Should return you three new columns called Time, RecordNumber, EventType 

Read more here: Source link