All Apps and Add-ons

Extracted field regex help

New Member

OK so I'm trying to do something pretty specific but can't seem to get the generated pattern thing to work and the format of this hurts my brain.

I want a regex that will grab everything after a / and ending with .mp3





Basically a wildcard so it will find anything with /*.mp3 regardless of what's between the / and the .

Any help would be greatly appretiate.

0 Karma

... | rex ".*/(?<song>.*?)\.mp3" | table song

Ultra Champion

??? That's what jonuwz wrote..

0 Karma


Eh? It creates a column called song whose value is everything between / and .mp3

0 Karma

New Member

That's a start, but I need it to be a wildcard entry without having to put in the actual filename.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!