Hello again Spelunkers!
So I have data that looks like this:
assessment=normal [1.0]
assessment=normal [1.1]
assessment=suspect [0.75]
assessment=suspect [0.88]
assessment=bad [0.467]
I want a table column named rating that takes the "normal," "suspect," "bad" without the [###] after it. So I wrote the below thinking I can name the column rating and then capture any alpha characters and terminate at the white space between the word value and the [###] value. What would be the correct way of writing this? Thank you in advance!
| rex field=raw_ "assessment=(?<rating>/\w/\s)"
Hi,
Please, try the following:
| rex field=_raw "assessment=(?<rating>\S+)"
Hi,
Please, try the following:
| rex field=_raw "assessment=(?<rating>\S+)"
Thank you! This worked perfectly.