https://community.splunk.com/t5/Splunk-Search/How-to-extract-some-values-of-specific-parameters/m-p/587914#M204748 <P>hi, i am a bit lost, i am trying to extract some % values of specific parameters. but with no luck</P> <P>example i want to extract the anti-virus value of 12%</P> <P>&nbsp;</P> <P>this is my command</P> <P>| rex field=_raw "Anti-Spam\s*&lt;(?&lt;cpu&gt;.*)&gt;"</P> <P>Gauges: Current<BR />System<BR />RAM Utilization 65%<BR />Overall CPU load average 43%<BR />CPU Utilization<BR />MGA 20%<BR />Anti-Virus 12%<BR />Reporting 0%<BR />Quarantine 0%</P> Tue, 08 Mar 2022 05:04:01 GMT thaghost99 2022-03-08T05:04:01Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-some-values-of-specific-parameters/m-p/587914#M204748 <P>hi, i am a bit lost, i am trying to extract some % values of specific parameters. but with no luck</P> <P>example i want to extract the anti-virus value of 12%</P> <P>&nbsp;</P> <P>this is my command</P> <P>| rex field=_raw "Anti-Spam\s*&lt;(?&lt;cpu&gt;.*)&gt;"</P> <P>Gauges: Current<BR />System<BR />RAM Utilization 65%<BR />Overall CPU load average 43%<BR />CPU Utilization<BR />MGA 20%<BR />Anti-Virus 12%<BR />Reporting 0%<BR />Quarantine 0%</P> Tue, 08 Mar 2022 05:04:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-some-values-of-specific-parameters/m-p/587914#M204748 thaghost99 2022-03-08T05:04:01Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-some-values-of-specific-parameters/m-p/587919#M204750 <P>sorry i am missing the anti-virus.</P><P>&nbsp;</P><P>here is the actual.</P><P>&nbsp;</P><P>Gauges: Current<BR />System<BR />RAM Utilization 53%<BR />Overall CPU load average 44%<BR />CPU Utilization<BR />MGA 34%<BR />Anti-Spam 35%<BR />Anti-Virus 0%<BR />Reporting 0%<BR />Quarantine 0%</P> Mon, 07 Mar 2022 22:41:22 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-some-values-of-specific-parameters/m-p/587919#M204750 thaghost99 2022-03-07T22:41:22Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-some-values-of-specific-parameters/m-p/587938#M204758 <P>&nbsp;Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/224479">@thaghost99</a>,</P><P>Below should work;</P><LI-CODE lang="markup">| rex field=_raw "Anti-Spam\s*(?&lt;cpu&gt;.*)"</LI-CODE> Tue, 08 Mar 2022 04:17:52 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-some-values-of-specific-parameters/m-p/587938#M204758 scelikok 2022-03-08T04:17:52Z