Rex to Exclude + Sign

[IRHM73]

I wonder whether someone may be able to help me please.

I'm trying to extract the text "Comapred to previous years almost a pleasure to use" from the raw data as shown below

feedback-comments=Compared+to+previous+years+almost+a+pleasure+to+use&isJavascript

I've tried the following regex, which does extract the text but this includes the '+' sign.

feedback-comments=(?<comments>[^[]+)\&isJavascript

Could someone possibly tell me please how I would be able to write this so the '+' signs are excluded.

Many thanks and kind regards

Chris

[gcato · Accepted solution]

You can use the rex command in sed mode. Here's a run anywhere example

|stats c as feedback-comments |eval feedback-comments="Compared+to+previous+years+almost+a+pleasure+to+use&isJavascript"
| rex field="feedback-comments" "(?<comments>[^&]+)" |rex mode=sed field="comments" "s/\+/ /g"

Hope this helps.

[IRHM73]

Hi @gcato thank you for this, but unfortunately this doesn't extract any of the information.

Kind Regards

Chris

[richgalloway]

@gcato's answer works for me. You only need the rex commands in your search. If it's not doing what you expect then please clarify your needs. For instance, to eliminate plus signs instead of replacing them with spaces use rex mode=sed field="comments" "s/\+//g".

[IRHM73]

Ah that was it, thank you for coming back to me with this.

Kind Regards

Chris

[richgalloway]

If your problem is solved, please accept the answer.

[chrisprodger]

Hi gcato, if you would like to change your comment to an answer I can accept this for you.

Many thanks and kind regards

Chris