I have an index: an_index , there's a field with URLs - URL/folder/folder I only want to list the records that contain a specific URL. I don't care about anything after the URL. I just want to match the URL
Strictly speaking, URLs can include folders. What do you mean by URL?
For example:
Field_x = https://xyz.com/folder_a/folder_b
Field_x = https://abc.com/folder_x
I want to only list the records where Field_x contains https://xyz.com
Hi @nlxtasy69,
did you tried something like this?
index=an_index
| rex "^(?<URL>https:\/\/xyz\.com"
| stats count BY URL
Ciao.
Giuseppe
| regex Field_x="^https:\/\/xyz\.com\/"