How to rex extract two last word?

[indeed_2000]

Hi how can I extract only last 2 word that exist in className

I have log like this:

2022-05-24 16:29:51,918 INFO [APP] [ActionName] className[xx.xx.xxx.xxxx.xxx.session.controller.SearchClusterFinancialTcpMBean.search] status[done]

2022-05-24 16:29:51,918 INFO [APP] [ActionName] className[xx.xx.xxx.xxxx.xxx.session.controller.SearchClusterFinancialTcpMBean.search.attribute] status[done]

excpected output:

SearchClusterFinancialTcpMBean.search

search.attribute

Any idea?

Thanks,

[ITWhisperer]

| rex "className.*\.(?<class>\w+\.\w+)\]"

[richgalloway · Accepted solution]

This regular expression should do it.

className\[.*?(?<lastTwo>[^\.]+\.[^\.]+?)]