my data is like below-- I want to extract when it has string ignore numbers
| rex mode=sed "s/[.a-z]*$//"
| rex "^\s+(?<url>[^\.]+).*\s+(?<ip>\d+\.\d+\.\d+\.\d+)"
that you can test at https://regex101.com/r/6axOMx/1
It is not working for me .am getting empty fields.
| rex field=HostName "^\s+(?<url>[^\.]+).*\s+(?<ip>\d+\.\d+\.\d+\.\d+)"
probably your row data are different, this regex is related to the information you shared, could you share an example of your row data?
Here's one way.
... | rex "(?<field>[^\.]+)"
I already tried this logic but it will extract like below
But i want like this