We used what is below to parse through stack traces that had been logged in JBOSS. We were looking for the page most frequently impacted by a persistent transaction blocking issue.
host=cmhlpecomecm* (ORA-00060 OR ORA-02049) AND org.apache.jsp | rex field=_raw "(?(?m)org.apache.jsp.*?\()" | stats count by page
This will show output with counts for the first line (from the top) in a given call stack. This is the page that triggered the exception.
org.apache.jsp.check_002dout.basket_jsp._jspx_meth_dsp_005fdroplet_005f3(