Hi @Rios , Thanks for your reply.
Let me explain my issue clearly,
in 1st log line, "NewClient" is there
in 2nd log line, "Get Compatible doc for event querySelect count(flag) from service1 where id = 'ABC-43862' and flag = 'true'" is there
in 3nd log line "Before checking in cache" is there
so here if I use %{DATA:textData} or %{WORD:textData} it will consider only one word, but not all words, some times whole string may have spaces and few special chars too.
so it has to detect all words in that string .
it should not disturb beside JSON data.
i hopp you understand .