Remove text from extracted value in a Field

[HywelBurris]

Hi,

Is it possible to remove text from within an extracted value. Probably best to give an example of what I am trying to do:-

Cisco ACS logs have the commands which are run on devices. e.g.

CmdSet=[ CmdAV=show CmdArgAV=running-config CmdArgAV=<cr> ],

I have pre and post context of:-

CmdSet=\[

\]\,

Can I use a regex in the Extracted value to remove the "CmdAV=" & "CmdArgAV=" values to return the command

"show running-config <cr>"

Thanks

[admin]

There is no way to do this in vRLI today. Basically what  you are looking to do is to extract pieces of info in different places in the logs and piece it together. We can't do this today in log insight. If you'd like you can submit a feature request at loginsight.vmware.com.

[HywelBurris]

Thanks Yogitap