Extract Part of Field

[IRHM73]

Hi, I wonder whether someone could help me please.

I'm trying to extract a particular value from a field which is "file-upload-ready". I can manage to exclude the value but not to extract it.

This is and example of the data string:

/country-private/file-upload-ready/1d555d59-9b5f-4877-bc76-2597142e1964/9011be92-6a1b-46a6-9e56-48dfdbf36c24

Many thanks and kind regards

Chris

[koshyk · Accepted solution]

hi,
Can you please try (assuming second block in your data is what you want)

|makeresults | eval myString="/country-private/file-upload-ready/1d555d59-9b5f-4877-bc76-2597142e1964/9011be92-6a1b-46a6-9e56-48dfdbf36c24"| rex field=myString "\/.+?\/(?<fileStatus>.+?)\/"

https://regex101.com/r/CvfqNH/1

[IRHM73]

Many thanks @koshyk.

Regards

Chris

[kunalmao]

you can do it by using rex command,

search .... | rex field=your_field "\/(?\w+-\w+)\/"

just verify the reg ex once.

[IRHM73]

Hi @kunalmaom thank you for this, but unfortunately this doesn't extract any data.

Many thanks and kind regards

Chris

[kunalmao]

obviously it won't , the regex is not correct 😛