topic Re: How to extract using rex in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666385#M228609 <P>What would the expected output look like?</P> Thu, 26 Oct 2023 14:48:55 GMT ITWhisperer 2023-10-26T14:48:55Z How to extract using rex https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666384#M228608 <P><SPAN>&nbsp;I want to extract the below&nbsp;<STRONG>contractWithCustomers and&nbsp;</STRONG> <STRONG>contracts&nbsp;</STRONG>&nbsp;using rex named as entity .&nbsp;<BR />For ID 1349c1f4-989c-4ea5-94ca-25fc40f6aab8 -flow started put:\<STRONG>contractWithCustomers</STRONG>:application\json:bmw-crm-wh-xl-cms-api-config<BR /><BR /></SPAN><SPAN>For ID 1697108895 -flow started put:\<STRONG>contracts</STRONG>:application\json:bmw-crm-wh-xl-cms-api-config<BR /><BR /></SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="avi7326_0-1698331179533.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/27842iB5117D14A60DE7E3/image-size/medium?v=v2&amp;px=400" role="button" title="avi7326_0-1698331179533.png" alt="avi7326_0-1698331179533.png" /></span></P><P>&nbsp;</P><P><SPAN><BR /><BR /></SPAN></P><P>&nbsp;</P> Thu, 26 Oct 2023 14:40:07 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666384#M228608 avi7326 2023-10-26T14:40:07Z Re: How to extract using rex https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666385#M228609 <P>What would the expected output look like?</P> Thu, 26 Oct 2023 14:48:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666385#M228609 ITWhisperer 2023-10-26T14:48:55Z Re: How to extract using rex https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666387#M228610 <P>In table want a field name as -<BR /><STRONG>Entity&nbsp;</STRONG><BR /><SPAN>contractWithCustomers</SPAN><BR /><SPAN>contracts</SPAN><BR /><BR /></P> Thu, 26 Oct 2023 14:51:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666387#M228610 avi7326 2023-10-26T14:51:40Z Re: How to extract using rex https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666391#M228612 <LI-CODE lang="markup">| rex "put:\\\\(?&lt;Entity&gt;[^:]+)"</LI-CODE> Thu, 26 Oct 2023 14:55:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-using-rex/m-p/666391#M228612 ITWhisperer 2023-10-26T14:55:40Z