topic Re: How to extract the string which is between the two different special characters using regex in Splunk Search

How to extract the string which is between the two different special characters using regex

SureshkumarD — Mon, 10 Jun 2024 21:22:14 GMT

Hi Team,

I need to extract the string which is between the two different special characters using regex. Could you please assist on this? Thank you. Here is the string below where I need to extract the string provisionById which is between the semicolon and period charcter.

Method End: com.bi.gb.rest.endpoint.PolicyAdminEndPoint.provisionById; Execution Time: 7

Re: How to extract the string which is between the two different special characters using regex

dtburrows3 — Mon, 10 Jun 2024 21:38:57 GMT

This line works for this specific example

| rex field=_raw "\.(?<extacted_fieldname_here>\w+);"

Assuming that your targeted extraction field always lies between the period and semi-colon I think it should do it.

the "\w+" could potentially need to be change depending on what the characters are between the 2 special characters. But for this example it looks to be camelCase so \w+ should work.

Re: How to extract the string which is between the two different special characters using regex

SureshkumarD — Tue, 11 Jun 2024 14:39:26 GMT

Hi @dtburrows3 ,

Thank you for your prompt response and it worked. Really appreciate your assistance.