Hi Community,
Sorry this should be easiest for you, but i have many problem with regex ....
i want to keep the first 3 sets of information (bellow in red)
i have already done this :
" |rex field=uri_path "^/(?\w+)" |
but i have only the first.
Can you help me ?
this should work:
| rex field=uri_path "^(?<myfield>/\w+/\w+/\w+/)"
Hi,
You can use below regular expression to extract those values
<yourBaseSearch> | rex field=uri_path "^(?<extracted_uri>\/\w+\/\w+\/\w+\/?)"