Sub a string until a specific character

[anasshsa]

Hello, I Need to know how can I trim a string from the begining until a specific character. For example, I have the the field data which contains emails so how can I trim the emails until "@" and let the rest in the field.

before: [email protected]
After:@babla.com

Thank you for your help 🙂

[vnravikumar]

Hi

Try like

| makeresults 
| eval email="[email protected]" 
| eval result = replace(email,"^[^\@]+","")

[richgalloway]

It's rex to the rescue. Try this.

... | rex mode=sed field=foo "s/[^@]+(@.*)/\1/" | ...