let me understand: you want to extract the three IPs or only the first?
if all the values, try this regex
| rex "(?<x_hello_abc>\d+\.\d+\.\d+\.\d+)"
that you can test at https://regex101.com/r/m6WhUh/1
if you want only the first, use this regex
| rex "\"(?<x_hello_abc>\d+\.\d+\.\d+\.\d+)"
that you can test at https://regex101.com/r/m6WhUh/2
thanks for your quick response. i am getting the below error:
Error in 'rex' command: Encountered the following error while compiling the regex '(?\d+.\d+.\d+.\d+)': Regex: syntax error in subpattern name (missing terminator).
but in this case, you take only the first IP, not the others.
Please, to share regexes use always the Code Sample button (the one with 101010) otherwise I cannot see your regexes.
where do you used the regex: in the rex command, in a field extraction or in a dashboard?
try at first in the search with the rex command (using the double quotes).