How to create a regex that removes everything before the second underscore?

[gbwilson]

I'm trying to create a regex that removes everything before the second underscore in a string. The number of characters before the second underscore varies.

For example:

DR300_Corp_76
BELLOE_MX400_32
AB200_Corp_123

I only want the two or three digits after the second underscore (i.e. 76, 32, 123, etc.)

[somesoni2 · Accepted solution]

If the end of you string is always numbers, try like this

your current search 
| eval yourfield=replace(yourfield,".+_(\d+)$","\1")

if not, try this

your current search 
| eval yourfield=replace(yourfield,"^([^_]+_){2}(.+)$","\2")

[gbwilson]

Thanks for your help! First one worked great.

[gcusello]

Hi gbwilson,
try this

(?<my_field>[^_]*_[^_]*)_.*

test it in https://regex101.com/r/YHRXW9/1
Bye.
Giuseppe