You may try below regex as well:
"(?:)[^ ]+ +(?P
If it does not work please let me know.
Regards,
Disha
Thanks man
try this on the search : (and remove the underscored, they are here to trick the html formatting)
* | rex "(?<myfield>(XPOS|POS|HF)\d+)" | table myfield
It's working great thank you guys
Thanks Åynm I had a missing parenthesis.
And if the characters after are not always digits, disha's regex is perfect.
* | rex "(?<myfield>(XPOS|POS|HF)\d+)" | table myfield
it seems that this isn't working
I'm receiving this error
Error in 'rex' command: Encountered the following error while compiling the regex '?