Phrasing Content Using DQL

[Vikas_g1997]

Hi Team,

Could you please help me parse the following log content to extract these fields:
"level", "message":"%msg", "transactionId", "requestId", "referer", "exception"

Log Content:

[26/Nov/2025:23:55:59 +0650] c.h.d.f.RequestTracingFilter [dw-1836 - GET /v1/users/648ceb50-8b21-48d5-97d4-b790011bce8f] INFO [Txn-0aa3cd6d-9d57-44ba-b2e2-33f58133ec40 - Req-859b96fc-8eb6-4cf4-834f-86c264c72a29] - [Referer-tyk-api-gateway,komodo-service] - RequestTracingFilter Current Transaction Id : Txn-0aa3cd6d-9d57-44ba-b2e2-33f58133ec40, Parent Transaction Id : PTxn-b733e9f3-52e5-4a60-bb97-332357594f96 NR-LINKING|MTMyMDIxMnxBUE18QVBQTElDQVRJT058OTMxMDIzMjM2|logan-prod-blue-7b69c986bd-zqhhg|57669505d4e64d4133e667eb1997dbe7|c79a77827947fbdb|bali-logan-prod|

Please let me know the best approach to achieve this in DQL.

Regards,
Vikas A. Goud

[AntonPineiro]

Hi,

Easier way would be using DPL Architect.

Best regards

[mark_bley]

not sure what exact value you expect from the fields you mention but maybe this helps put a bit:

data record(content="[26/Nov/2025:23:55:59 +0650] c.h.d.f.RequestTracingFilter [dw-1836 - GET /v1/users/648ceb50-8b21-48d5-97d4-b790011bce8f] INFO [Txn-0aa3cd6d-9d57-44ba-b2e2-33f58133ec40 - Req-859b96fc-8eb6-4cf4-834f-86c264c72a29] - [Referer-tyk-api-gateway,komodo-service] - RequestTracingFilter Current Transaction Id : Txn-0aa3cd6d-9d57-44ba-b2e2-33f58133ec40, Parent Transaction Id : PTxn-b733e9f3-52e5-4a60-bb97-332357594f96 NR-LINKING|MTMyMDIxMnxBUE18QVBQTElDQVRJT058OTMxMDIzMjM2|logan-prod-blue-7b69c986bd-zqhhg|57669505d4e64d4133e667eb1997dbe7|c79a77827947fbdb|bali-logan-prod|")
| parse content, """LD '] ' STRING ' [' LD '] ' STRING:level ' [' LD:transaction_id ' - ' LD:req_id '] - [' LD:referer '] - ' LD:message"""