topic Re: Remove extension from filepath in field value dynamically. in Splunk Search https://community.splunk.com/t5/Splunk-Search/Remove-extension-from-filepath-in-field-value-dynamically/m-p/434341#M170661 <P>@paragvidhi ,</P> <P>Try</P> <PRE><CODE>| rex field=filepath "(?&lt;Base&gt;.+)\.[^.]+$" </CODE></PRE> <P>where <CODE>filepath</CODE> is your current field</P> Wed, 19 Jun 2019 12:47:32 GMT renjith_nair 2019-06-19T12:47:32Z Remove extension from filepath in field value dynamically. https://community.splunk.com/t5/Splunk-Search/Remove-extension-from-filepath-in-field-value-dynamically/m-p/434340#M170660 <P>I have a field in my Splunk search name filepath which contains the base path of file like below<BR /> repository/2650/document/960891_1.pdf<BR /> repository/357/document/96_1.wordx</P> <P>I need to extract below string from my already existing field.<BR /> filepath value : repository/2650/document/960891_1.pdf<BR /> extract value : repository/2650/document/960891_1</P> <P>filepath value : repository/357/document/96_1.wordx<BR /> extract value : repository/357/document/96_1</P> <P>in short, I need to remove file extension from field value dynamically </P> Wed, 30 Sep 2020 01:00:29 GMT https://community.splunk.com/t5/Splunk-Search/Remove-extension-from-filepath-in-field-value-dynamically/m-p/434340#M170660 paragvidhi 2020-09-30T01:00:29Z Re: Remove extension from filepath in field value dynamically. https://community.splunk.com/t5/Splunk-Search/Remove-extension-from-filepath-in-field-value-dynamically/m-p/434341#M170661 <P>@paragvidhi ,</P> <P>Try</P> <PRE><CODE>| rex field=filepath "(?&lt;Base&gt;.+)\.[^.]+$" </CODE></PRE> <P>where <CODE>filepath</CODE> is your current field</P> Wed, 19 Jun 2019 12:47:32 GMT https://community.splunk.com/t5/Splunk-Search/Remove-extension-from-filepath-in-field-value-dynamically/m-p/434341#M170661 renjith_nair 2019-06-19T12:47:32Z Re: Remove extension from filepath in field value dynamically. https://community.splunk.com/t5/Splunk-Search/Remove-extension-from-filepath-in-field-value-dynamically/m-p/434342#M170662 <P>@renjith.nair ,<BR /> Thanks for your help it's working for me <BR /> thanks a lot</P> Wed, 19 Jun 2019 13:30:20 GMT https://community.splunk.com/t5/Splunk-Search/Remove-extension-from-filepath-in-field-value-dynamically/m-p/434342#M170662 paragvidhi 2019-06-19T13:30:20Z