https://community.splunk.com/t5/Splunk-Search/Extract-from-URL/m-p/511254#M143278 <P>This works for you...</P><P>| makeresults<BR />| eval value="<A href="https://abc.com/a1/countries/456/av/int/orig/curr" target="_blank" rel="noopener">https://abc.com/a1/countries/456/av/int/orig/curr</A>"<BR />| rex field=value "coun\D+(?&lt;Num_value&gt;\d+)"<BR />| stats values(Num_value)</P> Tue, 28 Jul 2020 02:54:37 GMT spitchika 2020-07-28T02:54:37Z https://community.splunk.com/t5/Splunk-Search/Extract-from-URL/m-p/511251#M143277 <P>Hi,</P><P>&nbsp;</P><P>I have following kind of url :</P><OL><LI><SPAN class="t"><SPAN class="t h"><A href="https://abc.com/" target="_blank" rel="noopener">https://abc.com/</A></SPAN>loc/country/123/iss</SPAN></LI><LI><SPAN class="t">https://<SPAN class="t h">abc.com</SPAN>/a1/v1/country/456.json<SPAN>?</SPAN>returnFields=attr<SPAN>,</SPAN>add</SPAN></LI><LI><SPAN class="t">https://<SPAN class="t h">abc.com</SPAN>/a1/countries/456/av/int/orig<SPAN>/</SPAN>curr</SPAN></LI></OL><P><SPAN class="t">I want to extract numbers(123,456) , in url whatever comes after country / countries , want that digit.</SPAN></P><P><SPAN class="t">Thanks in advance</SPAN></P><P><SPAN class="t">Thanks,</SPAN></P><P>&nbsp;</P> Tue, 28 Jul 2020 02:11:17 GMT https://community.splunk.com/t5/Splunk-Search/Extract-from-URL/m-p/511251#M143277 smahuja 2020-07-28T02:11:17Z https://community.splunk.com/t5/Splunk-Search/Extract-from-URL/m-p/511254#M143278 <P>This works for you...</P><P>| makeresults<BR />| eval value="<A href="https://abc.com/a1/countries/456/av/int/orig/curr" target="_blank" rel="noopener">https://abc.com/a1/countries/456/av/int/orig/curr</A>"<BR />| rex field=value "coun\D+(?&lt;Num_value&gt;\d+)"<BR />| stats values(Num_value)</P> Tue, 28 Jul 2020 02:54:37 GMT https://community.splunk.com/t5/Splunk-Search/Extract-from-URL/m-p/511254#M143278 spitchika 2020-07-28T02:54:37Z