https://community.splunk.com/t5/Splunk-Search/rex-field-extraction/m-p/578194#M201498 <LI-CODE lang="markup">| rex "PHYSICALDRIVE(?&lt;drive_number&gt;\d+)"</LI-CODE> Mon, 13 Dec 2021 12:52:32 GMT ITWhisperer 2021-12-13T12:52:32Z https://community.splunk.com/t5/Splunk-Search/rex-field-extraction/m-p/578186#M201496 <P>need to extract only the number.. ie., 23<BR /><BR /><SPAN>DiskDrive: \\.\PHYSICALDRIVE23 </SPAN></P> Mon, 13 Dec 2021 12:01:14 GMT https://community.splunk.com/t5/Splunk-Search/rex-field-extraction/m-p/578186#M201496 priya1926 2021-12-13T12:01:14Z https://community.splunk.com/t5/Splunk-Search/rex-field-extraction/m-p/578194#M201498 <LI-CODE lang="markup">| rex "PHYSICALDRIVE(?&lt;drive_number&gt;\d+)"</LI-CODE> Mon, 13 Dec 2021 12:52:32 GMT https://community.splunk.com/t5/Splunk-Search/rex-field-extraction/m-p/578194#M201498 ITWhisperer 2021-12-13T12:52:32Z https://community.splunk.com/t5/Splunk-Search/rex-field-extraction/m-p/578641#M201666 <P>Thanks a lot <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 16 Dec 2021 14:23:36 GMT https://community.splunk.com/t5/Splunk-Search/rex-field-extraction/m-p/578641#M201666 priya1926 2021-12-16T14:23:36Z