Re: unable to retrieve string from a big string wi... - Splunk Community

Getting Data In

Hi Wish to retrieve hammadahmad from below string. Below string contain html tag ( & a p o s ; ) without space.

String = &a pos;hammadahmad&ap os; (service Active Directory)
Current Regular Expression : | rex "Session login, user(?P/<USER/>.*?)logging in from machine"

Any help will be appreciated.

16 KB

rex field=USERNAME "&apos;(?<user>\S+)&apos;"

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...