I have 3 different values to be extracted. Please help me in writing rex command
here is the field values
I need values as below
I need a rex command
So... everything before the first dot or colon, not including quotes?
If you already have the name field key-value-extracted, try this:
... | rex field=name "^(?<name>[^.:]+)"
If you don't already have the name field, try this:
... | rex "name=\"(?<name>[^.:\"]+)"
View solution in original post