How do you extract a new field from a source field?

[pbsuju]

I have a log with below as a source field from which I need to extract the field Gateway name (My_Gateway_NONPROD).

Any help in how to extract it?.

source= /apps/geneos/gateway/logs/My_Gateway_NONPROD.log

[chrisyounger · Accepted solution]

hi @pbsuju

Give this a try : | rex field=source ".*\/(?<gateway_name>[^\.]*)" | table gateway_name

All the best!

[pbsuju]

Great thanks. It worked

[chrisyounger]

Great! Thanks for accepting 🙂