What rex command extracts data from csv?

[Ashwini008]

Hi,

I am trying to extract data from one of the column in lookup file. Regex expression is working in rex tool. I want to use that regex expression in rex command in splunk .

Rexgex expression  ^.*(?= \[)

Example: Want to extract the highlighted bold data. This data is present in csv lookup file.

1. TAX PLATFORM [12998]
2. CPOI [0639]

| inputlookup Meta.csv 
| rex field=Application "^.*(?<name>= \[)"

[ITWhisperer]

| inputlookup Meta.csv 
| rex field=Application "^(?<name>.*)= \["

[Ashwini008]

@ITWhisperer It isn't working

Ashwini008_0-1679654470813.png

[ITWhisperer · Accepted solution]

Sorry, I left the '=' in unnecessarily - try this

| inputlookup Meta.csv 
| rex field=Application "^(?<name>.*) \["