https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/521179#M146834 <P>yes&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/196088">@sam_splunk</a>&nbsp;</P> Thu, 24 Sep 2020 01:57:35 GMT chandraprathi 2020-09-24T01:57:35Z https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/512102#M143615 <P>I have required where the CEF comes as URL and I need just a part of the URL to pass as input(ARTIFACT.CEF.URL) to action in Splunk phantom. I am using the phantom version 4.8. Can someone suggest me an idea on How I can just pass the part of the URL instead of the complete URL?</P> Mon, 03 Aug 2020 07:03:12 GMT https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/512102#M143615 chandraprathi 2020-08-03T07:03:12Z https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/520365#M146514 <P>So you've got an artifact (e.g. souceAddress = "<A href="https://www.somedomain.com" target="_blank">https://www.somedomain.com</A>") and you want to trim out a portion of it (e.g. somedomain.com) to make available for downstream blocks?</P> Fri, 18 Sep 2020 18:12:21 GMT https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/520365#M146514 sam_splunk 2020-09-18T18:12:21Z https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/520426#M146542 <P>Thank you for your reply&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/196088">@sam_splunk</a>. I have fixed it by extracting the portion of the URL which I need and forgot to mention it here.</P> Sat, 19 Sep 2020 12:42:47 GMT https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/520426#M146542 chandraprathi 2020-09-19T12:42:47Z https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/521143#M146821 <P>Did you end up doing the extraction on the Splunk side?</P> Wed, 23 Sep 2020 19:17:09 GMT https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/521143#M146821 sam_splunk 2020-09-23T19:17:09Z https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/521179#M146834 <P>yes&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/196088">@sam_splunk</a>&nbsp;</P> Thu, 24 Sep 2020 01:57:35 GMT https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/521179#M146834 chandraprathi 2020-09-24T01:57:35Z https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/682098#M233054 <P>^([A-Za-z0-9]\.|[A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9]\.){1,3}[A-Za-z]{2,6}$</P> Wed, 27 Mar 2024 11:00:39 GMT https://community.splunk.com/t5/Splunk-Search/Regex-in-Playbook/m-p/682098#M233054 ikiransuryavans 2024-03-27T11:00:39Z