https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215052#M63044 <P>Try this. It'll create a new field named year with the information you asked for:</P> <PRE><CODE>your search here | rex field=DESC "(?&lt;year&gt;Year\-\d{4})" </CODE></PRE> Tue, 26 Apr 2016 13:12:20 GMT javiergn 2016-04-26T13:12:20Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215051#M63043 <P>hi,</P> <P>I have log with 3 columns</P> <P>ID....TYPE...... DESC<BR /> 1.......A............Member Since <STRONG>Year-2015</STRONG><BR /> 2...... B............Member Since <STRONG>Year-2014</STRONG><BR /> 3...... A............Member Since <STRONG>Year-2014</STRONG></P> <P>I only want bold part from field <STRONG>DESC</STRONG> </P> <P>How to write such a search?</P> <P>Thanks </P> Tue, 26 Apr 2016 12:59:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215051#M63043 tp92222 2016-04-26T12:59:03Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215052#M63044 <P>Try this. It'll create a new field named year with the information you asked for:</P> <PRE><CODE>your search here | rex field=DESC "(?&lt;year&gt;Year\-\d{4})" </CODE></PRE> Tue, 26 Apr 2016 13:12:20 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215052#M63044 javiergn 2016-04-26T13:12:20Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215053#M63045 <P>Assuming that DESC is already a extracted field</P> <P><CODE>your base search | rex field=DESC "Member\sSince\s(?&lt;member_since&gt;.*)"</CODE></P> Tue, 26 Apr 2016 13:14:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215053#M63045 diogofgm 2016-04-26T13:14:28Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215054#M63046 <P>Hi, did any of the comments below help you on this?<BR /> If yes, can you mark it as answered?<BR /> If not, is there any else we can do to help?<BR /> Unanswered questions make me sad <span class="lia-unicode-emoji" title=":disappointed_face:">😞</span></P> Mon, 09 May 2016 16:37:37 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215054#M63046 javiergn 2016-05-09T16:37:37Z https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215055#M63047 <P>thanks for help!!!!!</P> Tue, 24 May 2016 06:03:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-extract-a-string-from-each-value-in-a-column-in-my-log/m-p/215055#M63047 tp92222 2016-05-24T06:03:01Z