splunk search

[vinod0313]

I have logs like below

Email information for the template:payment_receipt_ppo_1 Posted Successfully with status:200

Email information for the template:DEV_1 Posted Successfully with status:200

Email information for the template:payment_1 Posted Successfully with status:400





i want to display like below


template

----------
payment_receipt_ppo_1
DEV_1
payment_1

[ITWhisperer]

| rex "template:(?<template>\S+)"