topic Re: How to extract subword from a string? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-extract-subword-from-a-string/m-p/626386#M217716 <P>Try something like this</P><LI-CODE lang="markup">| rex "ABC\\(?&lt;subword&gt;\w+)"</LI-CODE> Mon, 09 Jan 2023 09:44:17 GMT ITWhisperer 2023-01-09T09:44:17Z How to extract subword from a string? https://community.splunk.com/t5/Splunk-Search/How-to-extract-subword-from-a-string/m-p/626385#M217715 <P>Hi all,</P><P><SPAN>I want to extract the following word with rex expression:</SPAN></P><P><SPAN>ABC\qq1234&nbsp;</SPAN></P><P><SPAN>expected result: qq1234</SPAN></P><P><SPAN>Please note that the substring needed will always after ABC\. Any help will be appreciated!</SPAN></P> Mon, 09 Jan 2023 09:40:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-subword-from-a-string/m-p/626385#M217715 aa0 2023-01-09T09:40:17Z Re: How to extract subword from a string? https://community.splunk.com/t5/Splunk-Search/How-to-extract-subword-from-a-string/m-p/626386#M217716 <P>Try something like this</P><LI-CODE lang="markup">| rex "ABC\\(?&lt;subword&gt;\w+)"</LI-CODE> Mon, 09 Jan 2023 09:44:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-subword-from-a-string/m-p/626386#M217716 ITWhisperer 2023-01-09T09:44:17Z Re: How to extract subword from a string? https://community.splunk.com/t5/Splunk-Search/How-to-extract-subword-from-a-string/m-p/626388#M217717 <P><SPAN>Thanks a lot! It working well with 3 backslashes used instead in order to&nbsp;</SPAN>escape&nbsp;<SPAN>a backslash character.</SPAN></P> Mon, 09 Jan 2023 10:22:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-subword-from-a-string/m-p/626388#M217717 aa0 2023-01-09T10:22:42Z