Need help extracting "test" out of - http_request="POST /rest/api/test/*" Thanks,
'rex field=http_request "POST\s/rest/api/(?<method>.*?)/"'
rex field=http_request "POST\s/rest/api/(?<method>.*?)/"'
Great! Please accept the answer.
thanks it worked