Regex for
From: FA.south dam.australia-mb.ccjbh
need to get only: ccjbh
@shreyasamin64 - Try this, assuming your field name is my_field.
| rex field=my_field "(?<new_field>\w+)$"
And this will generate new_field with the value that you want.
@shreyasamin64 - Try this, assuming your field name is my_field.
| rex field=my_field "(?<new_field>\w+)$"
And this will generate new_field with the value that you want.
What have you tried so far? Did it include \.(\w+)$ ?
it works thank you
Try this regex to match ccjbh
\w+$