I'm trying to extract a string (alphabets and underscore) from a given string which can contain any number of numeric values in the end.
rex field=_raw "type: (?.*)\d*$"
ex.
type: alphabets123 | alphabet
type: extract1 | extract
type: write_regex23| write_regex
| makeresults
| eval x="type: write_regex23"
| rex field=x "\:+(?<extract>.*?)\d+"
replace x by your source field and remove makeresults
| makeresults
| eval x="type: write_regex23"
| rex field=x "\:+(?<extract>.*?)\d+"
replace x by your source field and remove makeresults
hi @hmbisht
Please accept the anser if it significantly helped resolve your issue or let us know if there are any more issues
Thanks a lot @Sukisen1981