Hello folks
I have a search in which I table. Here is a snippet of the results
ObjectDN _time
If I want to extract the names contained in the CN to output to a column on it's own how would I do that?
| rex field=ObjectDN "(?i)CN=(?<NAMES>[^,]+)"
View solution in original post
Perfect. thank you so much.
I don't know why the question cut off. My question is, if I wanted just the CN portion of the results to display in a separate column called "NAMES", how can I do that?
| rex field=ObjectDN "CN=(?<NAMES>[^,]+)"
ITWhisperer, thank you so much.
In some cases the CN is lower case so it doesn't match for those entries. Is there a way to make this case insensitive?
