https://community.splunk.com/t5/Splunk-Dev/How-to-extract-response-time/m-p/498749#M8969 <P>How to extract response time?</P> <P>response_time:0.002941865 app_id:\"c232e3a2-cecb-4e81-9beb-3150710c9a0a\"</P> <P>Extract response time only</P> Wed, 30 Sep 2020 03:12:49 GMT karthi2809 2020-09-30T03:12:49Z https://community.splunk.com/t5/Splunk-Dev/How-to-extract-response-time/m-p/498749#M8969 <P>How to extract response time?</P> <P>response_time:0.002941865 app_id:\"c232e3a2-cecb-4e81-9beb-3150710c9a0a\"</P> <P>Extract response time only</P> Wed, 30 Sep 2020 03:12:49 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-extract-response-time/m-p/498749#M8969 karthi2809 2020-09-30T03:12:49Z https://community.splunk.com/t5/Splunk-Dev/How-to-extract-response-time/m-p/498750#M8970 <P>Hi</P> <P>Try this</P> <PRE><CODE>| makeresults | eval test="response_time:0.002941865 app_id:\"c232e3a2-cecb-4e81-9beb-3150710c9a0a\"" | rex field=test "response_time:(?P&lt;response_time&gt;[\S]+)" </CODE></PRE> Thu, 28 Nov 2019 11:00:38 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-extract-response-time/m-p/498750#M8970 vnravikumar 2019-11-28T11:00:38Z