Splunk search for Extractions using regex in transforms.conf

Copy


			| rest /services/data/transforms/extractions | table eai:acl.app, title, SOURCE_KEY, REGEX, FORMAT, DEST_KEY | sort eai:acl.app title | eval DEST_KEY=if(DEST_KEY="","N/A",DEST_KEY) | rename eai:acl.app as App, title as Title, SOURCE_KEY as "Source Key", REGEX as RegEx, FORMAT as Format, DEST_KEY as "Dest Key"

This search will show you any field extractions that are found in a transforms.conf file that are using regular expressions. In order to run this search you must have the rest_properties_get capability.

0 comments

[0]

Category:

REST

Tags:

rest administrative

Search Commands: