rex regex to extract first folder name from the path

[sim_tcr]

Hello,

My source filed has value such as,

*/icsws/log/INSTANCE1/was/base/icsws_ca_server/SystemOut.log*
/icsws*/log/INSTANCE1/ihs/access_log
/wcics/log/INSTANCE1/ihs/access_log
...
...*

I would like to extract the first folder names (icsws*, wcics) from above to field named VAH.
can someone help me complete *| rex field=source ".."**

Thanks,
Simon Mandy

[javiergn · Accepted solution]

Try this:

| rex field=source "^/(?<first_folder>[^/]+)"