I have a log entry with the current format:
(delimited by underscore)
How can I extract this data into two different fields so that I can create a table
If your field is called 'field' then this
| rex field=field "(?<field1>[^_]*)_(?<field2>.*)"
will create new fields 'field1' and 'field2'
View solution in original post