Hi,
I need help to extract the 3 words after [yyy] using regex,
True [xxx] [yyy] Issue with ios phone 11
False [yyy] Issue with android phone
True [yyy] Issue with windows phone
| rex "\[yyy]\s(?<threewords>\S+\s+\S+\s+\S+)"
| rex "\[yyy\] (?<three_words>\S+\s+\S+\s+\S+)" | table three_words
This creates a new field called three_words