I m having a hard time trying to extract a string from a field from a splunk search using splunk regex , can someone help pls ?
The field looks like client_info=xxx-yyy=aaaa-bbb-cccc::4.144.1::web-app-id::plugin-id
I just want the string web-app-id and plugin-id extracted in separate fields named WebApp and Plugin.
Appreciate any help on this , thanks in advance !
