What is the Splunk regular expression to remove characters/number after second space?

[DataOrg]

i want the data to be deleted after a second space.

EX:data is like this "lenovo thinkcentre 6.7" and i want "lenovo thinkcentre"

lenovo thinkcentre 6.7 --- lenovo thinkcentre
DELL workspace (FULL server) --- DELL workspace
samsung S8 full version. ----- samsung S8

[mstjohn_splunk]

hi @premranjithj

Did the answer below solve your problem? If so, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help ya. Thanks for posting!

[kmorris_splunk · Accepted solution]

If this data is already extracted into a field try:

... | rex field=yourfield "^(?<myval>\w+\s+\w+)\s+"