https://community.splunk.com/t5/Splunk-Search/Help-with-regex-pattern/m-p/598698#M208468 <P>Hey,</P> <P>i want a regex result from</P> <P data-unlink="true">10.66.189.62 -- -- -[17/May/2022:05:59:16--0400]--502- "POST /astra/sliceHTTP/1.1" req_len=1776-req_cont_len=117-req_cont_enc="-"-res_body_len=341 res_len=733 "https://<STRONG>ninepoint</STRONG>.blackrock.com/astra/&nbsp;". "Mozilla/5.0- (Macintosh; Intel-Mac-OS-X-10_15_7) -AppleWebKit/537.36-(KHTML,-Like-Gecko)<BR />Chrome/10.0.4896.127 Safari/537.36" x_fw_for="-".req_time=278.326-ups_res_time=278.326 ups_con_time=0.011-ups_status=502-pipe=. -VNDRegID=undefined-</P> <P>as;</P> <P>ninepoint</P> <P>Could you please help me with my query? thank you</P> Fri, 20 May 2022 17:58:54 GMT crucifier_0 2022-05-20T17:58:54Z https://community.splunk.com/t5/Splunk-Search/Help-with-regex-pattern/m-p/598698#M208468 <P>Hey,</P> <P>i want a regex result from</P> <P data-unlink="true">10.66.189.62 -- -- -[17/May/2022:05:59:16--0400]--502- "POST /astra/sliceHTTP/1.1" req_len=1776-req_cont_len=117-req_cont_enc="-"-res_body_len=341 res_len=733 "https://<STRONG>ninepoint</STRONG>.blackrock.com/astra/&nbsp;". "Mozilla/5.0- (Macintosh; Intel-Mac-OS-X-10_15_7) -AppleWebKit/537.36-(KHTML,-Like-Gecko)<BR />Chrome/10.0.4896.127 Safari/537.36" x_fw_for="-".req_time=278.326-ups_res_time=278.326 ups_con_time=0.011-ups_status=502-pipe=. -VNDRegID=undefined-</P> <P>as;</P> <P>ninepoint</P> <P>Could you please help me with my query? thank you</P> Fri, 20 May 2022 17:58:54 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-regex-pattern/m-p/598698#M208468 crucifier_0 2022-05-20T17:58:54Z https://community.splunk.com/t5/Splunk-Search/Help-with-regex-pattern/m-p/598702#M208472 <LI-CODE lang="markup">| rex "https:\/\/(?&lt;result&gt;\w+)"</LI-CODE> Fri, 20 May 2022 17:58:52 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-regex-pattern/m-p/598702#M208472 ITWhisperer 2022-05-20T17:58:52Z