Hi, I wonder whether someone could help me please.
I'm trying to extract a particular value from a field which is "file-upload-ready". I can manage to exclude the value but not to extract it.
This is and example of the data string:
/country-private/file-upload-ready/1d555d59-9b5f-4877-bc76-2597142e1964/9011be92-6a1b-46a6-9e56-48dfdbf36c24
Many thanks and kind regards
Chris
hi,
Can you please try (assuming second block in your data is what you want)
|makeresults | eval myString="/country-private/file-upload-ready/1d555d59-9b5f-4877-bc76-2597142e1964/9011be92-6a1b-46a6-9e56-48dfdbf36c24"| rex field=myString "\/.+?\/(?<fileStatus>.+?)\/"
hi,
Can you please try (assuming second block in your data is what you want)
|makeresults | eval myString="/country-private/file-upload-ready/1d555d59-9b5f-4877-bc76-2597142e1964/9011be92-6a1b-46a6-9e56-48dfdbf36c24"| rex field=myString "\/.+?\/(?<fileStatus>.+?)\/"
Many thanks @koshyk.
Regards
Chris
you can do it by using rex command,
search .... | rex field=your_field "\/(?\w+-\w+)\/"
just verify the reg ex once.
Hi @kunalmaom thank you for this, but unfortunately this doesn't extract any data.
Many thanks and kind regards
Chris
obviously it won't , the regex is not correct 😛