Regex to extract status[number] alone from extracted field

[Bhuavana]

Hi,

I have two below field[rstatus] values extracted from events

response.status = 200
response.status = 404

Can you share the regex to extract number[i.e 200 or 404 alone ] from above string.

[gfuente · Accepted solution]

Hello

try this regex:

...| rex field="rstatus" "response\.status\s\=\s(?<yourfield>\d+)" | ...

Regards

[Bhuavana]

Thanks a lot.. above solution is worked...