All Apps and Add-ons

Extracted field regex help

chrisslagel
New Member

OK so I'm trying to do something pretty specific but can't seem to get the generated pattern thing to work and the format of this hurts my brain.

I want a regex that will grab everything after a / and ending with .mp3

So

/xx-xxx-xx.mp3

/xyxxy.mp3

etc.

Basically a wildcard so it will find anything with /*.mp3 regardless of what's between the / and the .

Any help would be greatly appretiate.

0 Karma

jonuwz
Influencer
... | rex ".*/(?<song>.*?)\.mp3" | table song

kristian_kolb
Ultra Champion

??? That's what jonuwz wrote..

0 Karma

jonuwz
Influencer

Eh? It creates a column called song whose value is everything between / and .mp3

0 Karma

chrisslagel
New Member

That's a start, but I need it to be a wildcard entry without having to put in the actual filename.

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...