BAD (MK1725) Like this several entries are there searched with word BAD, where in the value in paranthesis ( ) will have a different values and i want to fetch only those and generate a list.

[woodcock · Accepted solution]

... | rex ".*BAD\s\((?<BadStr>[^\)]*)" | dedup BadStr | stats values(BadStr)

[rkdasari]

Thanks it worked