https://community.splunk.com/t5/Splunk-Search/How-to-write-rex-to-extract-string/m-p/611677#M212657 <P>What have you tried so far?</P> Thu, 01 Sep 2022 20:13:59 GMT richgalloway 2022-09-01T20:13:59Z https://community.splunk.com/t5/Splunk-Search/How-to-write-rex-to-extract-string/m-p/611669#M212652 <P>Hi,</P> <P><SPAN>REX command&nbsp;rex mode=sed to remove quotation marks and numbers inside of them</SPAN></P> <P>&nbsp;</P> <P>OUTPUT file "19214132.IKU" copied to output directory</P> <P>OUTPUT file "19315133.IKU" copied to output directory</P> <P>OUTPUT file "19416134.IKU" copied to output directory</P> <P>....</P> <P>&nbsp;</P> <P>Desired result -&gt;&nbsp; &nbsp;OUTPUT file .IKU copied to output directory</P> <P>&nbsp;</P> Fri, 02 Sep 2022 05:23:53 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-rex-to-extract-string/m-p/611669#M212652 Edwin1471 2022-09-02T05:23:53Z https://community.splunk.com/t5/Splunk-Search/How-to-write-rex-to-extract-string/m-p/611674#M212656 <LI-CODE lang="markup">| rex mode=sed "s/(?&lt;q1&gt;\"\d+)(?&lt;l1&gt;\.[^\"]+)(?&lt;q2&gt;\")/\2/g"</LI-CODE> Thu, 01 Sep 2022 20:09:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-rex-to-extract-string/m-p/611674#M212656 ITWhisperer 2022-09-01T20:09:42Z https://community.splunk.com/t5/Splunk-Search/How-to-write-rex-to-extract-string/m-p/611677#M212657 <P>What have you tried so far?</P> Thu, 01 Sep 2022 20:13:59 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-rex-to-extract-string/m-p/611677#M212657 richgalloway 2022-09-01T20:13:59Z