| rex max_match=0 "(?<email>\S+\@\S+\.\S+)
| rex "\d+\/\d+\/\d+ (?<count>\d+)"
| table count email
Logs example
12/03/2022 2 sdf@gmail.xom adf@hotmail.com
13/3/2021 3 sdd@hotmail.com adf@gmqil.com sfgvc@orkut.com
It's like cout and email id will be varing every time
So how to get that dynamically
And further variable should be used to analyze also