Solved: Re: How to write Host_regex to extract filename f...

deepthi5 · ‎03-30-2016

Hi Team

I have file names C:\SPLUNKCEBU\rdilraanan010-4-1.ncr.com.Gi0-2.csv

from which i need host_regex to take only the name of the file ex: rdilraanan010-4-1.ncr.com.Gi0-2 No path and no extension
Right now i have got a host_regex =(?\w+-\d+-\d) like this but this extracts only till rdilraanan010-4-1 which is not my desired output

can any one help

Thanks and Regards,
Deepthi Bulusu.

richgalloway · ‎03-30-2016

This worked for me using your example on regex101.com

"(?<filename>[\w-\d\.]+)\.\w"

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway · ‎03-30-2016

This worked for me using your example on regex101.com

"(?<filename>[\w-\d\.]+)\.\w"

---
If this reply helps you, Karma would be appreciated.

How to write Host_regex to extract filename from the source path

See just what you’ve been missing | Observability tracks at Splunk University

Weezer at .conf25? Say it ain’t so!

How SC4S Makes Suricata Logs Ingestion Simple

Are you a member of the Splunk Community?

How to write Host_regex to extract filename from the source path

See just what you’ve been missing | Observability tracks at Splunk University

Weezer at .conf25? Say it ain’t so!

How SC4S Makes Suricata Logs Ingestion Simple