https://community.splunk.com/t5/Splunk-Search/Pull-out-Account-number-from-result-rex/m-p/552207#M156709 <LI-CODE lang="markup">| rex "accountNumber=\'(?&lt;acct&gt;\d+)\'"</LI-CODE> Wed, 19 May 2021 13:53:09 GMT ITWhisperer 2021-05-19T13:53:09Z https://community.splunk.com/t5/Splunk-Search/Pull-out-Account-number-from-result-rex/m-p/552206#M156708 <P>I have this result and&nbsp; would like to just pull out the accountNumber&nbsp;<SPAN class="t">12345678</SPAN></P><P><BR /><SPAN class="t">021-05-19_09:36:25.459</SPAN> <SPAN class="t">ERROR</SPAN> <SPAN class="t">c.r.r.m.m.o.CreateAccountResponseProcessingOrchestratorImpl-c6de96</SPAN> <SPAN class="t a"><SPAN class="t">No</SPAN> <SPAN class="t">Batch</SPAN> <SPAN class="t">ID</SPAN> <SPAN class="t">found</SPAN> <SPAN class="t">in</SPAN> <SPAN class="t">XYZ</SPAN> <SPAN class="t">response</SPAN></SPAN><SPAN>. </SPAN><SPAN class="t">Context:</SPAN><SPAN>[</SPAN><SPAN class="t">CommunicationContext</SPAN><SPAN>{</SPAN><SPAN class="t">accountKey=AccountKey</SPAN><SPAN>{</SPAN><SPAN class="t">accountNumber=</SPAN><SPAN>'</SPAN><SPAN class="t">12345678</SPAN><SPAN>', </SPAN><SPAN class="t">providerCode=</SPAN><SPAN>'</SPAN><SPAN class="t">BKRBO1</SPAN><SPAN>'}, </SPAN><SPAN class="t">correlationId=</SPAN><SPAN>'</SPAN><SPAN class="t">f1683b92-32ee-4b5e-8b9f-27cb98c6de96</SPAN><SPAN>', </SPAN><SPAN class="t">properties=</SPAN><SPAN>{</SPAN><SPAN class="t">COMMUNICATION_TYPE=CREATE_NEW_ACCOUNT</SPAN><SPAN>, </SPAN><SPAN class="t">ENRICH_XYZ_REQUEST=false</SPAN><SPAN>}}]</SPAN></P> Wed, 19 May 2021 13:51:15 GMT https://community.splunk.com/t5/Splunk-Search/Pull-out-Account-number-from-result-rex/m-p/552206#M156708 showser 2021-05-19T13:51:15Z https://community.splunk.com/t5/Splunk-Search/Pull-out-Account-number-from-result-rex/m-p/552207#M156709 <LI-CODE lang="markup">| rex "accountNumber=\'(?&lt;acct&gt;\d+)\'"</LI-CODE> Wed, 19 May 2021 13:53:09 GMT https://community.splunk.com/t5/Splunk-Search/Pull-out-Account-number-from-result-rex/m-p/552207#M156709 ITWhisperer 2021-05-19T13:53:09Z