hi , I want to extract from this date
12/11/2024
result should be 12/2024
Hi @SN1 ,
if this is a field (your_field), the easiest way it to use the eval functions, not a regex:
| eval date=strftime(strptime(your_field,"%m/%d/%Y"),"%m/%Y")
Ciao.
Giuseppe
Apart from what @gcusello says, rex will only extract contiguous characters into a field, so what you are asking for is not possible in a single rex command.
Hi @SN1 ,
if this is a field (your_field), the easiest way it to use the eval functions, not a regex:
| eval date=strftime(strptime(your_field,"%m/%d/%Y"),"%m/%Y")
Ciao.
Giuseppe