Finding logs with special characters

[binay2634]

Hi All,

I have been trying to extract userids which has special characters in it but with no luck.

For ex let's say a field name uid contains two userids one is "[email protected]" and the other one is "[email protected]".

Now I want to write a query which could extract only the uid with + sign in it.  Please help on this

[binay2634]

Thank you for suggesting, it worked

[ITWhisperer · Accepted solution]

Assuming only 1 + and user id is in quotes.

| rex "(?<userid>[^\"]+\+[^\"]+@[^\"]+)"