Good Morning,
I am currently trying to extract a field from a variable.
The variable name is command, and the value the command holds is
Command = "CONNECT SPLNKUSER GROUP(QA)"
What I'm trying to do is extract the QA part and create a new variable called group.
For example:
Group = QA
Group= Accounting
Group = Payroll
Thank you,
Marco
This should do it.
| rex field=Command "\((?<group>[^\)]+)"
This should do it.
| rex field=Command "\((?<group>[^\)]+)"