How to List records where a field contains a specific string?

[nlxtasy69]

I have an index: an_index , there's a field with URLs - URL/folder/folder   I only want to list the records that contain a specific URL.  I don't care about anything after the URL.  I just want to match the URL

[ITWhisperer]

Strictly speaking, URLs can include folders. What do you mean by URL?

[nlxtasy69]

For example:

Field_x = https://xyz.com/folder_a/folder_b

Field_x = https://abc.com/folder_x

I want to only list the records where Field_x contains https://xyz.com

[gcusello]

Hi @nlxtasy69,

did you tried something like this?

index=an_index
| rex "^(?<URL>https:\/\/xyz\.com"
| stats count BY URL

Ciao.

Giuseppe

[ITWhisperer · Accepted solution]

| regex Field_x="^https:\/\/xyz\.com\/"