As has been suggested, some sample events would be good. Also, a clearer description of your use case would be nice, i.e. what do you want to achieve. From your comments above one could think that you want to search for events ranging between certain dates and extract the email addresses out of that.
Assuming that the '2013' part of the date you want to filter on, is part of the actual timestamp that splunk used for indexing your events, you can use the built-in time modifiers for searching;
index=blah earliest=-1y@y latest=@y | rex "\s(?<email>\S+@\S+)"
The regex used for extracting the
So, provide sample events and a clearer description of your desired outcome, and you'll get better help.
@martin yes i want to commbine into AB.
That's what i am asking how should i do it?
@rsennett actually its a regex expression for email combos and date of only 2013 like 2013/9/24 or 2013/10/22.I want to combine both so that i could capture only 2013 email combos.Is it possible?
Also... if this is Splunk related you might want to share what you are trying to capture (give us a sample) and to what end you are wanting to combine the regex. Without knowing what you are trying to do, there is no way to help...