how to extract only numeric values from field into table ? it fetching the non field values too from.

[salmanbpc]

for example: dport=86 pattern: 0 tcp && dst port 86 && dst 345
here dport is field and pattern is non field value.

in the report command im getting "86 pattern: 0 tcp" i just need the port numeric value.

[renjith_nair]

@salmanbpc ,

Try

"your search"|rex field=dport "dport=(?<port_number>\d+)"