topic Re: regex to extract multiple email addresses in splunk search in Splunk Search https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233953#M188451 <P>Try something like this</P> <PRE><CODE>Your current search giving above output | rex field=YourFieldContainingEmailAddressLine max_match=0 "(?&lt;email&gt;[\w\d\.\-]+\@[\w\d\.]+)" </CODE></PRE> Wed, 23 Sep 2015 15:36:33 GMT somesoni2 2015-09-23T15:36:33Z regex to extract multiple email addresses in splunk search https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233952#M188450 <P>How to list out all the email addresses in a splunk search which displays the following results.</P> <P>Storing shipConfirm email for <A href="mailto:abcabac123@msn.com">abcabac123@msn.com</A><BR /> Storing shipConfirm email for <A href="mailto:lkgjdlgfk@hotmail.co.uk">lkgjdlgfk@hotmail.co.uk</A><BR /> Storing shipConfirm email for <A href="mailto:def.t.khv@gmail.co">def.t.khv@gmail.co</A><BR /> and so on</P> Wed, 23 Sep 2015 14:51:22 GMT https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233952#M188450 pavanae 2015-09-23T14:51:22Z Re: regex to extract multiple email addresses in splunk search https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233953#M188451 <P>Try something like this</P> <PRE><CODE>Your current search giving above output | rex field=YourFieldContainingEmailAddressLine max_match=0 "(?&lt;email&gt;[\w\d\.\-]+\@[\w\d\.]+)" </CODE></PRE> Wed, 23 Sep 2015 15:36:33 GMT https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233953#M188451 somesoni2 2015-09-23T15:36:33Z Re: regex to extract multiple email addresses in splunk search https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233954#M188452 <P>Thanks it worked</P> Wed, 23 Sep 2015 19:24:57 GMT https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233954#M188452 pavanae 2015-09-23T19:24:57Z Re: regex to extract multiple email addresses in splunk search https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233955#M188453 <P>I will suggest slightly improved version to cover some rare naming cases</P> <PRE><CODE>(?&lt;email&gt;[\w\d\.\-\_]+\@[\w\d\.\-\_]+\.[\w\d]+) </CODE></PRE> Thu, 14 Jun 2018 14:45:02 GMT https://community.splunk.com/t5/Splunk-Search/regex-to-extract-multiple-email-addresses-in-splunk-search/m-p/233955#M188453 mkretsch 2018-06-14T14:45:02Z