Hi we have some uri's as shown below which have 2 words (/verify/abrasives) before /ecatalog and 3 words and 4 words. I want to get the uri's only after /ecatalog
i have tried like this but it did not give me proper results. Any suggestions?
Base search | rex field=uri_path ".*?(?[^(?:/ecatalog)]+)"
Your base search| rex field=uri "/ecatalog(?<custom>.*)"
This worked for me on RegExr using your sample data.
rex field=uri_path "(?<custom>(\/verify[\/[\S]*))\/ecatalog"
Thanks. This gives me before /ecatalog. I want the part which is after ecatalog.