https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-this-field-extraction-using-rex/m-p/591717#M12034 <P>Is this what you mean?</P><LI-CODE lang="markup">| rex "^(?&lt;jcb&gt;(?:2131|1800|35\d{3})\d{11})|(?&lt;visa&gt;4[0-9]{12}(?:[0-9]{3})?)$"</LI-CODE> Thu, 31 Mar 2022 09:11:44 GMT ITWhisperer 2022-03-31T09:11:44Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-this-field-extraction-using-rex/m-p/591708#M12033 <P>Hi All, I'm trying to extract the card details in&nbsp; my logs. Just confused how to extract the two or more card details or thier respective fields using rex command.</P> <P>Example : Visa card numbers regex is&nbsp;<SPAN>^4[0-9]{12}(?:[0-9]{3})?$</SPAN></P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; JCB card numbers regex is&nbsp;<SPAN>^(?:2131|1800|35\d{3})\d{11}$</SPAN></P> <P><SPAN>I just want to extract the Visa and JCB fileds to check my card details. Is thier a way to create named grouped fields for the above cards using rex command in a single search?</SPAN></P> <P><SPAN>Help me with the query guys.</SPAN></P> <P><SPAN>Thanks in advance.</SPAN></P> Thu, 31 Mar 2022 13:31:59 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-this-field-extraction-using-rex/m-p/591708#M12033 Kk 2022-03-31T13:31:59Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-this-field-extraction-using-rex/m-p/591717#M12034 <P>Is this what you mean?</P><LI-CODE lang="markup">| rex "^(?&lt;jcb&gt;(?:2131|1800|35\d{3})\d{11})|(?&lt;visa&gt;4[0-9]{12}(?:[0-9]{3})?)$"</LI-CODE> Thu, 31 Mar 2022 09:11:44 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-this-field-extraction-using-rex/m-p/591717#M12034 ITWhisperer 2022-03-31T09:11:44Z