https://community.splunk.com/t5/Knowledge-Management/How-to-get-FQDN-from-URL/m-p/177852#M7698 <P><A href="http://answers.splunk.com/answers/26928/regex-issue-with-domain-name-extraction-from-url-field.html" target="_blank">Refer this</A></P> <P>Simply put <CODE>((?[^:/?#]+):)?(//(?[^/?#]*))?(?[^?#|\s]*)(\?(?[^#|^\s]*))?(#(?.*[^\s]))?</CODE></P> <P>cs_uri_authority is the one you are looking for.</P> Mon, 28 Sep 2020 19:10:20 GMT ramdaspr 2020-09-28T19:10:20Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-FQDN-from-URL/m-p/177850#M7696 <P>For example getting just "<A href="http://www.google.com">www.google.com</A>"<BR /> <A href="https://www.google.co.nz/webhp?sourceid=chrome-instant&amp;ion=1&amp;espv=2&amp;ie=UTF-8#q=splunk">https://www.google.co.nz/webhp?sourceid=chrome-instant&amp;ion=1&amp;espv=2&amp;ie=UTF-8#q=splunk</A></P> <P>where "<A href="https://www.google.co.nz/webhp?sourceid=chrome-instant&amp;ion=1&amp;espv=2&amp;ie=UTF-8#q=splunk">https://www.google.co.nz/webhp?sourceid=chrome-instant&amp;ion=1&amp;espv=2&amp;ie=UTF-8#q=splunk</A>" is already extracted as URL. </P> Tue, 17 Mar 2015 02:39:24 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-FQDN-from-URL/m-p/177850#M7696 dineshp 2015-03-17T02:39:24Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-FQDN-from-URL/m-p/177851#M7697 <P>Try this regular expression: (?!(http|https)(:\/\/))+([\w]+.){1}([\w]+.?)+</P> <P>Will be happy to hear back if it worked or not.</P> <UL> <LI>Mitesh.</LI> </UL> Tue, 17 Mar 2015 04:49:41 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-FQDN-from-URL/m-p/177851#M7697 miteshvohra 2015-03-17T04:49:41Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-FQDN-from-URL/m-p/177852#M7698 <P><A href="http://answers.splunk.com/answers/26928/regex-issue-with-domain-name-extraction-from-url-field.html" target="_blank">Refer this</A></P> <P>Simply put <CODE>((?[^:/?#]+):)?(//(?[^/?#]*))?(?[^?#|\s]*)(\?(?[^#|^\s]*))?(#(?.*[^\s]))?</CODE></P> <P>cs_uri_authority is the one you are looking for.</P> Mon, 28 Sep 2020 19:10:20 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-FQDN-from-URL/m-p/177852#M7698 ramdaspr 2020-09-28T19:10:20Z