Hi,
I have some syslog logs and I need to extract the first words of a field values. The field value starts like this:
Site Corporate Windows AM\\Passed\\
My result should be :
Corporate Passed
Note: I can have also Unmanaged instead of Corporate and Failed insted of Passed, so I have 4 options:
Corporate Passed
Corporate Failed
Unmanaged Passed
Unmanaged Failed
That happens because of some additional escaping which is needed.
Try this version, which avoids needing a triple \
Site (?<site>\w+).+\\\\(?<result>\w+)
@marco_massari11 if you want extract multiple fields then try below-
Updated-
Site (?<field1>\w+)[^\\\\]+\\\\(?<field2>\w+)
It will extract in field1 and field2.
-------
let me know if it helps!
Hi @493669 I have this message error Regex: missing terminating ] for character class.
That happens because of some additional escaping which is needed.
Try this version, which avoids needing a triple \
Site (?<site>\w+).+\\\\(?<result>\w+)