Hi,
Can anyone help with a regex to extract the string seen after a : and up to a final ".
so for example.....
"event : thisstringneedstobeextracted"
note the space either side of the :
Thanks.
Try \s:\s(?<myfield>[^\"]+)\"
. If you're doing the extraction at search time, you'll need extra escape characters \s:\s(?<myfield>[^\\\"]+)\\\"
.