"sessionID":"ABCDFE-112451x55-3734-4601-82a9-7ab6c5151d85"
"sessionID":"123456789012"
"sessionID":"12dsfvvxv3"
Please help me with rex to extract this from _raw
| rex field=_raw "sessionID\":\"(?P<sessionID>[^\"\:]+)"
got it thanks