I want to extract the last field of the message . For example if i have message as below
*/api/provider/brand - In this case i want the field to be 'brand' * but the message format may differ in the above example it has 3 parameters i want the 3rd but there will be messages where there will be 4 parameters so i am looking for expression which captures last field irrespective of how many parameters it has it should start from last and capture the field starting from last -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2ce4a204-1c4b-4abf-a27f-2227aadcc6c5%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
