How can I extract with Regex?

Splunk Search

Hello,

Hope you are well

I want to etract only TP58304 on this line (8)TP58304 (5)endra(3)ttx(5)local(0)

How can i do please?

Thanks

this is one option

| rex "\(\d\)(?<name>[^\(]+)\(\d\)"

r. Ismo

Get Updates on the Splunk Community!

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...

Join the Conversation