topic Re: New column using regex in Dashboards & Visualizations

New column using regex

yifatcy — Tue, 11 May 2021 10:50:04 GMT

Hi,

I have the field Queue in my dataset with pattern as follows:

adcams01

adcams02

adcems05

I would like to create a new column in my table which contains 3 letters after adc. For example:

Is it possible using regex? I know it should include eval but it didn't work for me.

Thank you

kamlesh_vaghela — Tue, 11 May 2021 10:58:21 GMT

Try

YOUR_SEARCH | rex field=Queue "adc(?<Site>.{3})"

Sample Search:

| makeresults | eval _raw="Queue adcams01 adcams02 adcems05" | multikv forceheader=1 | table Queue | rex field=Queue "adc(?<Site>.{3})"

Thanks
Kamlesh Vaghela

If this reply helps you, an upvote would be appreciated.

ITWhisperer — Tue, 11 May 2021 10:59:01 GMT

| rex field=Queue "adc(?<Site>[^\d]+)"

yifatcy — Tue, 11 May 2021 11:02:25 GMT

Works! thanks