I'm looking to get rid of the numbers and colon before the larger one in the middle, and after
I have
1:31705:1
1:19439:8
1:19438:13
What I would like is
31705
19439
19438
Try this:
| rex field=yourfield "^[^:]+:(?<yourfield>[^:]+):"
Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. 🙂
Try this:
| rex field=yourfield "^[^:]+:(?<yourfield>[^:]+):"
Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. 🙂