https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-after-particular-word/m-p/608855#M211710 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/248056">@labaningombam</a>&nbsp;, you want to extract only after&nbsp;<SPAN>&nbsp;'/v1/locations/' or any multiple&nbsp;conditions there?</SPAN></P> Tue, 09 Aug 2022 13:11:33 GMT vnravikumar 2022-08-09T13:11:33Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-after-particular-word/m-p/608785#M211686 <P>Hi,</P> <P>I have a line in the event like</P> <P>"<SPAN>/v1/locations/7b-cec6-4820-b699-ec"</SPAN>&nbsp;</P> <P>I need to extract&nbsp;&nbsp;<SPAN>7b-cec6-4820-b699-ec, or which ever comes after&nbsp; /v1/locations/ and before a "</SPAN></P> <P><SPAN>Please help on the same.</SPAN></P> <P>Thank you.</P> Tue, 09 Aug 2022 15:02:58 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-after-particular-word/m-p/608785#M211686 labaningombam 2022-08-09T15:02:58Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-after-particular-word/m-p/608791#M211690 <P>Try something like this</P><LI-CODE lang="markup">| rex "/v1/locations/(?&lt;field&gt;[^\"]+)"</LI-CODE> Tue, 09 Aug 2022 07:30:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-after-particular-word/m-p/608791#M211690 ITWhisperer 2022-08-09T07:30:36Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-after-particular-word/m-p/608855#M211710 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/248056">@labaningombam</a>&nbsp;, you want to extract only after&nbsp;<SPAN>&nbsp;'/v1/locations/' or any multiple&nbsp;conditions there?</SPAN></P> Tue, 09 Aug 2022 13:11:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-string-after-particular-word/m-p/608855#M211710 vnravikumar 2022-08-09T13:11:33Z