I have various search string under the field name entity:
Entity
1 GBP:BOOT2NDSUNQTR_MAINT4_lonlx11067
2 GBP:BOOT2NDSUNMONTH_MAINT3_redlxd00130
3 AMP:BOOT2NDSATMONTH_MAINT4_psclxd00034
4 AMP:BOOTALLSUNMONTH_MAINT1_SecProd_DEV_totlxfidevsp126
.
.
.
and so on
I want host name to be extracted such as lonlx11067,totlxfidevsp126 and do on. Could you help me in writing the query for the same I am particularly new to this
Write your extraction rex.
... | rex field=Entity "_(?<host>[^_]+?)$" | table Entity host
Write your extraction rex.
... | rex field=Entity "_(?<host>[^_]+?)$" | table Entity host
I did not understood what you said.What is extraction rex