Hi
How to extract the field "user" from the following data?
ABCDEFGHI\cw2343@ac.abcdefghi.com
ABCDEFGHI\kirann@ac.abcdefghi.com
ABCDEFGHI\12kirAN@ac.abcdefghi.com
I need to extract
user:
cw2343
kirann
12kirAN
\\(?<user>[^@]+)
Sundareshr beat me to it again.
Try this for rex
... | rex "\\(?<user>[^@]+)" | table user