Splunk Regex to String period from front and end of domain name match

[tbalouch]

Hey guys,

I'm having trouble finding a Regex to remove begining and ending from a domain match against my dns logs. For example I have the field extraction SOA\s(?.*$) which gets me the extraction domain=.www.google.com.

I can't figure out how to get rid of the outer periods.

[glitchcowboy]

Wild guess (without a sample)

SOAs\.(?<domain>[\w\.\d-]+)\.

[richgalloway]

Please share some sample events.