https://community.splunk.com/t5/Splunk-Search/Extracting-string-from-field-in-lookup/m-p/536563#M151720 <P>Hi Rohan,</P><P>You can try this:<BR />... your search | rex field="Title" "\:\s+(?&lt;Name&gt;[^\d]+)"<BR /><BR />Assumptions:</P><P>- Names will always come between : and a digit.&nbsp;</P> Wed, 20 Jan 2021 18:23:55 GMT diogofgm 2021-01-20T18:23:55Z https://community.splunk.com/t5/Splunk-Search/Extracting-string-from-field-in-lookup/m-p/536560#M151719 <P>Hi,&nbsp;</P><P>I have a&nbsp; few fields in lookup from which I am trying to extract strings. I read that rex is what I should be using.&nbsp;</P><P>Can anyone recommend how should I go about this ?&nbsp;</P><P>I have attached lookup field and result of rex command that I want.&nbsp;</P><P>&nbsp;</P><P>- Thanks&nbsp;</P><P>Rohan K.</P><P>&nbsp;</P> Wed, 20 Jan 2021 18:07:15 GMT https://community.splunk.com/t5/Splunk-Search/Extracting-string-from-field-in-lookup/m-p/536560#M151719 Rgk_Trail 2021-01-20T18:07:15Z https://community.splunk.com/t5/Splunk-Search/Extracting-string-from-field-in-lookup/m-p/536563#M151720 <P>Hi Rohan,</P><P>You can try this:<BR />... your search | rex field="Title" "\:\s+(?&lt;Name&gt;[^\d]+)"<BR /><BR />Assumptions:</P><P>- Names will always come between : and a digit.&nbsp;</P> Wed, 20 Jan 2021 18:23:55 GMT https://community.splunk.com/t5/Splunk-Search/Extracting-string-from-field-in-lookup/m-p/536563#M151720 diogofgm 2021-01-20T18:23:55Z https://community.splunk.com/t5/Splunk-Search/Extracting-string-from-field-in-lookup/m-p/536569#M151722 <P>Worked like a charm !&nbsp;</P><P>Thanks a lot.&nbsp;</P> Wed, 20 Jan 2021 18:57:17 GMT https://community.splunk.com/t5/Splunk-Search/Extracting-string-from-field-in-lookup/m-p/536569#M151722 Rgk_Trail 2021-01-20T18:57:17Z