topic Re: How to apply rex on a field/variable? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-apply-rex-on-a-field-variable/m-p/356755#M105544 <PRE><CODE>| rex field=&lt;field&gt; "&lt;regex&gt;" </CODE></PRE> Mon, 05 Feb 2018 23:39:24 GMT micahkemp 2018-02-05T23:39:24Z How to apply rex on a field/variable? https://community.splunk.com/t5/Splunk-Search/How-to-apply-rex-on-a-field-variable/m-p/356754#M105543 <P>I have a basic rex question: </P> <P>In my splunk query I have:</P> <PRE><CODE>| eval foo = .... </CODE></PRE> <P>and I would like to be able to apply rex on <CODE>foo</CODE> but I don't seem to able to do so?</P> <P>Does anybody know how to apply splunk regex on a variable defined in a query, such a foo above?</P> Mon, 05 Feb 2018 23:29:38 GMT https://community.splunk.com/t5/Splunk-Search/How-to-apply-rex-on-a-field-variable/m-p/356754#M105543 viggor 2018-02-05T23:29:38Z Re: How to apply rex on a field/variable? https://community.splunk.com/t5/Splunk-Search/How-to-apply-rex-on-a-field-variable/m-p/356755#M105544 <PRE><CODE>| rex field=&lt;field&gt; "&lt;regex&gt;" </CODE></PRE> Mon, 05 Feb 2018 23:39:24 GMT https://community.splunk.com/t5/Splunk-Search/How-to-apply-rex-on-a-field-variable/m-p/356755#M105544 micahkemp 2018-02-05T23:39:24Z