Hi All,
Please help me to solve this.
desc="Trigger App : Search [Abc_[qwert] asd] number"
I want to fetch the "[Abc_[qwert] asd]" from the above string
Thanks
Hi @Khuzair81,
Please try below;
| rex field=desc "(?<new_field>\[.+[^\]].*\])"
try using https://regex101.com . You can test your regex statements prior to using them on splunk
Hi @Khuzair81,
Please try below;
| rex field=desc "(?<new_field>\[.+[^\]].*\])"
@scelikokThankyou