How to extract the last 5 digits from the following results, I need last 5 digits as a new field
00022234 001234 012345 0002345
Assuming this is a field called numbers. Try this ... | rex field=numbers "(?<numbers>\d{5})$"
numbers
... | rex field=numbers "(?<numbers>\d{5})$"
View solution in original post
