topic Re: Need Regex in Splunk Search https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478781#M134242 <P>@vijaysri </P> <P>Can you please share sample event and expected output?</P> Fri, 03 Jan 2020 07:21:26 GMT kamlesh_vaghela 2020-01-03T07:21:26Z Need Regex https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478780#M134241 <P>Hi </P> <P>Please help me with the regex for below<BR /> 1) Hostname <BR /> 2) IP address<BR /> 3) UserID (for eg: vijay_111)<BR /> 4) mail id</P> Fri, 03 Jan 2020 07:05:05 GMT https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478780#M134241 VijaySrrie 2020-01-03T07:05:05Z Re: Need Regex https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478781#M134242 <P>@vijaysri </P> <P>Can you please share sample event and expected output?</P> Fri, 03 Jan 2020 07:21:26 GMT https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478781#M134242 kamlesh_vaghela 2020-01-03T07:21:26Z Re: Need Regex https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478782#M134243 <P>Hello, </P> <P>Can you share your events plz. </P> <P>Thank you</P> Fri, 03 Jan 2020 13:03:00 GMT https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478782#M134243 Kawtar 2020-01-03T13:03:00Z Re: Need Regex https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478783#M134244 <P>Hi,</P> <P>We don't have any event. We just need the regex for above.<BR /> eg: Hostname - alphanumeric <BR /> eg: User ID (for eg: vijay_111)</P> Fri, 03 Jan 2020 14:24:05 GMT https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478783#M134244 VijaySrrie 2020-01-03T14:24:05Z Re: Need Regex https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478784#M134245 <P>If you can share a sample event please provide</P> Fri, 03 Jan 2020 14:25:06 GMT https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478784#M134245 VijaySrrie 2020-01-03T14:25:06Z Re: Need Regex https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478785#M134246 <P>The regex would need to be created specifically for the event. It would be a custom field extraction based on the event syntax. Without an event, it is impossible to create a reliable regex for the field extraction you desire.</P> Fri, 03 Jan 2020 14:51:12 GMT https://community.splunk.com/t5/Splunk-Search/Need-Regex/m-p/478785#M134246 mydog8it 2020-01-03T14:51:12Z