Help with Regex

[shruti14]

Hi, Can someone help me with field extraction for string :

/home/mysqld/databasename/audit/audit.log

I want to extract databasename as Database to be used 

i have written regex but getting error, can someone help with correct regex:

rex field=source "\/home\/\/mysqld\//(?<Database>.*)/audit\/"

[richgalloway · Accepted solution]

It would help to know what error you're getting.

The regex has too many slashes. needs explicit <>, and the slash before "audit" must be escaped.  This works with the example data.

| rex field=source "\/home\/mysqld\/(?<Database>.*)\/audit\/"