rex command help...

[harishalipaka]

Hi All,

my data is like below-- I want to extract when it has string ignore numbers

853727-gcplusrspcndb01.usa.corp.ad
10.198.29.5

Output:-

853727-gcplusrspcndb01
 10.198.29.5

[to4kawa]

| rex mode=sed "s/[.a-z]*$//"

[gcusello]

Hi @harishalipaka,
try this

| rex "^\s+(?<url>[^\.]+).*\s+(?<ip>\d+\.\d+\.\d+\.\d+)"

that you can test at https://regex101.com/r/6axOMx/1

Ciao.
Giuseppe

[harishalipaka]

Hi @gcusello

It is not working for me .am getting empty fields.

| rex field=HostName "^\s+(?<url>[^\.]+).*\s+(?<ip>\d+\.\d+\.\d+\.\d+)"

[gcusello]

Hi @harishalipaka,
probably your row data are different, this regex is related to the information you shared, could you share an example of your row data?

Ciao.
Giuseppe

[richgalloway]

Here's one way.

... | rex "(?<field>[^\.]+)"

[harishalipaka]

Hi @richgalloway

I already tried this logic but it will extract like below

853727-gcplusrspcndb01
10

But i want like this

853727-gcplusrspcndb01
  10.198.29.5