- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to extract and count email address?
stick-o
New Member
06-03-2023
03:06 PM
Hello. How to extract and count personal email address? Say the destination email field (d-email) contains email as below:
abc.work-email.com
cef.work-email.com
a.gmail.com
b.hotmail.com
I want to see how many email was sent to Gmail/Hotmail or any personal account.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yuanliu

SplunkTrust
06-03-2023
06:21 PM
How about excluding work-email.com?
| where NOT match('d-email', "\.work-email\.com$")
| stats count
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
stik-0
New Member
06-04-2023
03:51 AM
there will be thousands of business email domains. Will be difficult this way.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
stik-0
New Member
06-04-2023
04:23 AM
