help with field extraction

[chauble]

I have a log with the following types of entries.. I would like to extract the information between the single quotes into a field.. any insight would be appreciated

WARN The filing operation with containment name 'Missed Payment Second Letter Xen418' is experiencing high numbers of uniqueness violations

WARN The filing operation with containment name 'Changing Your Child Support Order Xen261' is experiencing high numbers of uniqueness violations

WARN The filing operation with containment name 'Transfer Letter, Universal Xenn351A-B, Xen351SPA, Xen351SOM' is experiencing high numbers of uniqueness violations

[carasso · Accepted solution]

use rex or make a saved field extraction. this regex extracts anything between two single quotes...

... | rex "'(?<my_quoted_field>[^']*)'"