Field extraction

[syedabuthahir]

Hi All,

I want to extract one particular filed under the description column but when i tried to extract the field i am getting the below error

"The extraction failed. If you are extracting multiple fields, try removing one or more fields. Start with extractions that are embedded within longer text strings."

i tried to extract through regex 

Defined","category":"Not Defined","resolution_time":"Not Defined","response_sla_exclusion":"","sla_contract":"Met","long_description":"Contact Number: 9967795614Type: Error/FailureWebsite/URL: https://xxxxxxProduct Name: Automatic Ticket AssignmentWorkstation/Cubicle/Bay: xxxxxDescription: Kindly check Health Status alertCountry/Location: xxxxVersion Number: NA","problem_abstract":"Kindly check Health Status alert"}

in the above i want to extract only the Product name field

Can someone help me on this 

[thambisetty · Accepted solution]

| rex "Product\sName\:\s+(?<ProductName>.*)Workstation"

[isoutamo]

Can you post full (json?) event or raw, so we could see from where this extractions should do? Also your current spl query could help us to point you to right direction.
r. Ismo