How to extract field using regex?

[evallja]

Hello everyone,

Please, I need to extract a field named product (with its value in bold) from the below Message field values, and a field named status (with its value in italics):

Message="Product: Microsoft SQL Server 2019 LocalDB -- Installation completed successfully."
Message="Product: Microsoft OLE DB Driver for SQL Server -- Installation completed successfully."

Thank you in advance.

[gcusello · Accepted solution]

Hi @evallja,

please try this:

| rex field=Message "^Product:\s+(?<Product>[^-]+)"

that you can test at https://regex101.com/r/922J2Q/1

Ciao.

Giuseppe