Splunk parse url path value (not query parameter)

[srinathv77]

www-pcm-com/p/Logitech-Keyboards/product~dpno~8146199~pdp.gbhdbgh

How can i get the value 8146199 (which will always be followed by "~dpno~" ?

I want only 8146199.

[linu1988]

Try this

sourcetype=xxx| rex field=_raw/field_name "~dpno~(?<Val>\\d+)" |table Val

field_name= address/ something which has been extracted by splunk

[somesoni2]

Try this

..your base search ..| rex field=url "dpno~(?<YourFieldName>[^~]+)"

[srinathv77]

Thank you for quick response.