question Re: Nifi RouteText Regex issue in Archives of Support Questions (Read Only)

Nifi RouteText Regex issue

accsmtpsetup — Thu, 26 Apr 2018 20:57:48 GMT

p.p1 {margin: 0.0px 0.0px 10.0px 0.0px; line-height: 18.0px; font: 15.0px Arial; color: #404041; -webkit-text-stroke: #404041} span.s1 {font-kerning: none}

I am trying to route all lines of the Web access logs that have HTTP Status Code that is not equal to 200 to Splunk. While all the original logs are written to HDFS as is. Using this pipeline GetFile->RouteText->PutSplunk on one side of GetFile and another branch with GetFile->PutHDFS. Everything is working fine except that the filter in RouteText is passing all the logs files instead of only passing the log lines that have HTTP Status code that is not 200. Here is the Regex I am using ${line:getDelimitedField(8,' '):trim():equals(200):not()}

Re: Nifi RouteText Regex issue

accsmtpsetup — Sun, 18 Aug 2019 09:10:34 GMT

I have added some screen shots of the pipeline and the RouteText processors config

Re: Nifi RouteText Regex issue

accsmtpsetup — Thu, 26 Apr 2018 21:12:57 GMT

Any help is greatly appreciated.

Re: Nifi RouteText Regex issue

accsmtpsetup — Fri, 27 Apr 2018 02:41:30 GMT

${line:getDelimitedField(7, ' '):trim():toNumber():gt(200)}

This regex worked for me.