Hello folks
I have a search in which I table. Here is a snippet of the results
ObjectDN _time
cn=Jane Fonda,OU=Blue,OU=Pad,OU=Circle Team,DC=circle,DC=net | 2021-04-22 23:48:36 | CN=Matt Cruz,OU=Blue,OU=Pad2,OU=Circle Team,DC=circle,DC=net | 2021-04-22 01:07:43
If I want to extract the names contained in the CN to output to a column on it's own how would I do that?
|
Perfect. thank you so much.
I don't know why the question cut off. My question is, if I wanted just the CN portion of the results to display in a separate column called "NAMES", how can I do that?
| rex field=ObjectDN "CN=(?<NAMES>[^,]+)"
ITWhisperer, thank you so much.
In some cases the CN is lower case so it doesn't match for those entries. Is there a way to make this case insensitive?
| rex field=ObjectDN "(?i)CN=(?<NAMES>[^,]+)"