How to apply regex to lookup table field?

[Taruchit]

Hello All,

I have a lookup file with multiple fields. I am reading it using inputlookup command and implementing some filters. Now  I need to apply regex on a field and extract the corresponding matched string from each row of the lookup into a separate field.

The regex is: xxx[\_\w]+:([a-z_]+)

Thus, I need your guidance and inputs to build the same.

Thank you

Taruchit

[ITWhisperer]

You need to specify a field that you wish the extracted pattern to be put in - for example:

xxx[\_\w]+:(?<fieldname>[a-z_]+)

[Taruchit]

Hello @ITWhisperer,

Thank you for your response. 

Can you please help with example of how to write the code?

|inputlookup myTable.csv
|where _time=relative_time(now(),"-1d@d")

Now I need to apply the regular expression on fieldA and store the extracted data from each row in field: res.

It would be very helpful if you could help.

Thank you

[ITWhisperer · Accepted solution]

| rex field=fieldA "xxx[\_\w]+:(?<res>[a-z_]+)"

[Taruchit]

Thank you @ITWhisperer for your prompt help.