https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-write-Regex-for-extracted-these-fields/m-p/598097#M1436 <P>Have you tried Splunk's field extraction utility?</P><P><A href="https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/Knowledge/ExtractfieldsinteractivelywithIFX" target="_blank">https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/Knowledge/ExtractfieldsinteractivelywithIFX</A></P> Tue, 17 May 2022 14:20:11 GMT somesoni2 2022-05-17T14:20:11Z https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-write-Regex-for-extracted-these-fields/m-p/598088#M1435 <P>I need to extract the below field, Required a Regex for the same</P> <P>1)trc values I need to get regex for "<SPAN>Asva.nsearoon@peypafe.com"</SPAN></P> <P><SPAN>2) tsd values I need to get regex for "flipkart.com"</SPAN></P> <P>3)SIP values I need to get regex for "<SPAN>198.161.151.190</SPAN><SPAN>"</SPAN></P> <P>Below the sample logs.</P> <P><SPAN>{"etype":"User","eid":"prvs=343333211os.com","ut":"Regular","tsd":"\"flipkart.com\" &lt;Flipkart@youraccount-alerts.com&gt;","sip":"198.161.151.190","srt":"1","trc":"Asva.nsearoon@peypafe.com","</SPAN></P> <P>Thanks,</P> <P>&nbsp;</P> Tue, 17 May 2022 14:59:32 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-write-Regex-for-extracted-these-fields/m-p/598088#M1435 SabariRajanT 2022-05-17T14:59:32Z https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-write-Regex-for-extracted-these-fields/m-p/598097#M1436 <P>Have you tried Splunk's field extraction utility?</P><P><A href="https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/Knowledge/ExtractfieldsinteractivelywithIFX" target="_blank">https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/Knowledge/ExtractfieldsinteractivelywithIFX</A></P> Tue, 17 May 2022 14:20:11 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-write-Regex-for-extracted-these-fields/m-p/598097#M1436 somesoni2 2022-05-17T14:20:11Z