topic How to extract a URL between two strings ? in Splunk Search

How to extract a URL between two strings ?

maramk — Wed, 03 Nov 2021 19:37:36 GMT

Hi,

I am a have content like below and i would like to extract git url from it. Please suggest me how to do it using rex?

Content:

proj_url\x1B[0;m=https://my.test.net/sample/test.git test\x1B[0;m=abcd.

Any help is appreciated.

Thanks.

somesoni2 — Wed, 03 Nov 2021 20:30:55 GMT

Try this

..| rex "(?<URL>http\S+)"

...| rex "x1B\[0\;m\=(?<URL>\S+)"

maramk — Wed, 03 Nov 2021 20:36:15 GMT

first query worked. Thank you