<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Extracting fields using regex in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65085#M16108</link>
    <description>&lt;P&gt;How about:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;(?i)humidity : (?P&amp;lt;fieldname&amp;gt;[\d\.]+)
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Mon, 17 Jun 2013 06:59:54 GMT</pubDate>
    <dc:creator>chris</dc:creator>
    <dc:date>2013-06-17T06:59:54Z</dc:date>
    <item>
      <title>Extracting fields using regex</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65084#M16107</link>
      <description>&lt;P&gt;When i try to extract a field using this (?i)humidity : (?P&lt;FIELDNAME&gt;.+) expression. The result below is given. Is there anyway to extract just 0.82 which is the humidity I needed ? Need help on this, thanks in advance &lt;span class="lia-unicode-emoji" title=":grinning_face_with_big_eyes:"&gt;😃&lt;/span&gt;&lt;/FIELDNAME&gt;&lt;/P&gt;

&lt;P&gt;0.82 &lt;BR /&gt;
icon : cloudy &lt;BR /&gt;
ozone : 263.15 &lt;BR /&gt;
precipIntensity : 0.001 &lt;BR /&gt;
precipProbability : 0.05 &lt;BR /&gt;
precipType : rain &lt;BR /&gt;
pressure : 1005.57 &lt;BR /&gt;
summary : Dry and Overcast &lt;BR /&gt;
temperature : 80.94&lt;/P&gt;</description>
      <pubDate>Mon, 17 Jun 2013 06:56:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65084#M16107</guid>
      <dc:creator>kailun92</dc:creator>
      <dc:date>2013-06-17T06:56:54Z</dc:date>
    </item>
    <item>
      <title>Re: Extracting fields using regex</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65085#M16108</link>
      <description>&lt;P&gt;How about:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;(?i)humidity : (?P&amp;lt;fieldname&amp;gt;[\d\.]+)
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 17 Jun 2013 06:59:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65085#M16108</guid>
      <dc:creator>chris</dc:creator>
      <dc:date>2013-06-17T06:59:54Z</dc:date>
    </item>
    <item>
      <title>Re: Extracting fields using regex</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65086#M16109</link>
      <description>&lt;P&gt;Thank you SO MUCH, i love you i have been solving for so long&lt;/P&gt;</description>
      <pubDate>Mon, 17 Jun 2013 07:10:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65086#M16109</guid>
      <dc:creator>kailun92</dc:creator>
      <dc:date>2013-06-17T07:10:28Z</dc:date>
    </item>
    <item>
      <title>Re: Extracting fields using regex</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65087#M16110</link>
      <description>&lt;P&gt;Check you with you, do you know how to extract summary : Dry and Overcast ? Same situation. If cannot then how about icon ? how to extract the words out ? I am extraction the part below it also.&lt;/P&gt;</description>
      <pubDate>Sat, 22 Jun 2013 05:04:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Extracting-fields-using-regex/m-p/65087#M16110</guid>
      <dc:creator>kailun92</dc:creator>
      <dc:date>2013-06-22T05:04:13Z</dc:date>
    </item>
  </channel>
</rss>

