topic Re: How to split/extract substring after the first - from the right side in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-split-extract-substring-before-the-first-from-the-right/m-p/551126#M156381 <LI-CODE lang="markup">| rex "(?&lt;host&gt;[^\-]+)\-"</LI-CODE> Mon, 10 May 2021 18:31:51 GMT ITWhisperer 2021-05-10T18:31:51Z How to split/extract substring before the first - from the right side of the string https://community.splunk.com/t5/Splunk-Search/How-to-split-extract-substring-before-the-first-from-the-right/m-p/551125#M156380 <LI-SPOILER>How to split/extract substring before the first - from the right side of the field on splunk search</LI-SPOILER><P>For ex: My field hostname contains</P><P>Hostname = abc-xyz<BR />Hostname = abc-01-def<BR />Hostname = pqr-01</P><P>I want to see like below .</P><P>abc<BR />abc-01<BR />pqr</P><P>Please help me.</P> Mon, 10 May 2021 18:33:30 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-extract-substring-before-the-first-from-the-right/m-p/551125#M156380 keshavgupta 2021-05-10T18:33:30Z Re: How to split/extract substring after the first - from the right side https://community.splunk.com/t5/Splunk-Search/How-to-split-extract-substring-before-the-first-from-the-right/m-p/551126#M156381 <LI-CODE lang="markup">| rex "(?&lt;host&gt;[^\-]+)\-"</LI-CODE> Mon, 10 May 2021 18:31:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-extract-substring-before-the-first-from-the-right/m-p/551126#M156381 ITWhisperer 2021-05-10T18:31:51Z