How can I extract with Regex?

Splunk Search

Hello,

Hope you are well

I want to etract only TP58304 on this line (8)TP58304 (5)endra(3)ttx(5)local(0)

How can i do please?

Thanks

this is one option

| rex "\(\d\)(?<name>[^\(]+)\(\d\)"

r. Ismo

Get Updates on the Splunk Community!

You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at ...

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas Do you ever feel ...

Join the Conversation