Rex

[Logan20]

Hello!!

I have a field value that looks like:

abcd124567-1609173498

I only want to remove abcd-1609173498 and have the 124567 remain for the field value. Can someone help me with constructing a rex field=fieldname mode=sed format to get this done?

[ITWhisperer]

| makeresults 
| eval field="abcd124567-1609173498"
| rex mode=sed field=field "s/[^\d]+(?<code>\d+)\-\w+/\1/g"