Hello,
My source filed has value such as,
*/icsws/log/INSTANCE1/was/base/icsws_ca_server/SystemOut.log*
/icsws*/log/INSTANCE1/ihs/access_log
/wcics/log/INSTANCE1/ihs/access_log
...
...*
I would like to extract the first folder names (icsws*, wcics) from above to field named VAH.
can someone help me complete *| rex field=source ".."**
Thanks,
Simon Mandy
Try this:
| rex field=source "^/(?<first_folder>[^/]+)"