Using punct is quick and dirty, using cluster is highly configurable and nuanced. Those are your options. ... View more

won't you need to cater for the stuff either side (spaces/dashes? rex "cmdbRequest\s(?<Request_ID>\d+)\s\-\sTransaction" ...or something like that, depending on how consistent you expect it to all be. I've not tested it, but it might put you on the correct path ... View more

rex field=USERNAME "&apos;(?<user>\S+)&apos;" ... View more

Thanks a loads. your solution solved my problem. Cheers Rishi ... View more

Is this even related to the question? ... View more