topic Re: Extract a string in Splunk Search

Extract a string

rbachu1 — Sat, 13 Feb 2021 20:15:13 GMT

Hi everyone, I have the below string.

isadhakdahdj asdh, hosadhao activity=Follow Up, entryName=Initial Outreach, asasa adadad oidaoidadalnd.

I want to extract .

activity=Follow Up

entryName=Initial Outreach

activity & entryName are static, but value of that may be dyna

ITWhisperer — Sat, 13 Feb 2021 20:38:49 GMT

| rex "activity=(?<activity>[^,]+),\sentryName=(?<entryName>[^,]+),"

rbachu1 — Fri, 19 Feb 2021 04:13:02 GMT

Thank you so much, exactly what I needed.