How to capture 2 fields, the first part of this wo...

Splunk Search

Hi i'm trying to capture 2 fields, the first part of this word (LON) and the remaining (RTI2_SND.TRACE) within the same regular expression

LON_RTI2_SND.TRACE

Thanks

(?<first>[^_]*)_(?<rest>.*)

Get Updates on the Splunk Community!

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...

How to capture 2 fields, the first part of this word (LON) and the remaining (RTI2_SND.TRACE) within the same regex?