https://community.splunk.com/t5/Getting-Data-In/regex/m-p/659971#M111595 <LI-CODE lang="markup">| rex "detection_method=\"(?&lt;detection_method&gt;[^\"]+)\""</LI-CODE> Fri, 06 Oct 2023 12:00:45 GMT ITWhisperer 2023-10-06T12:00:45Z https://community.splunk.com/t5/Getting-Data-In/regex/m-p/659968#M111594 <P>Hi Splunkers!<BR />&nbsp; &nbsp;I would like to extract detection_method value, "Access Protection"<BR /><BR />file_name="HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM\", detection_method="Access Protection", vendor_action="IDS_ACTION_WOULD_BLOCK",<BR /><BR />Thanks,<BR />Manoj Kumar S</P> Fri, 06 Oct 2023 11:39:30 GMT https://community.splunk.com/t5/Getting-Data-In/regex/m-p/659968#M111594 smanojkumar 2023-10-06T11:39:30Z https://community.splunk.com/t5/Getting-Data-In/regex/m-p/659971#M111595 <LI-CODE lang="markup">| rex "detection_method=\"(?&lt;detection_method&gt;[^\"]+)\""</LI-CODE> Fri, 06 Oct 2023 12:00:45 GMT https://community.splunk.com/t5/Getting-Data-In/regex/m-p/659971#M111595 ITWhisperer 2023-10-06T12:00:45Z https://community.splunk.com/t5/Getting-Data-In/regex/m-p/659974#M111596 <P>Hi All... Splunk newbie learning videos, for absolute beginners:<BR /><A href="https://www.youtube.com/@SiemNewbies101/playlists" target="_blank">https://www.youtube.com/@SiemNewbies101/playlists</A></P><P>I have added 24 small videos of rex... Completely for Splunk newbies and beginners. hope this helps somebody, thanks.</P> Fri, 06 Oct 2023 12:21:56 GMT https://community.splunk.com/t5/Getting-Data-In/regex/m-p/659974#M111596 inventsekar 2023-10-06T12:21:56Z