Updated regex a bit to select the values as per the example: | rex field=line "quota list --verbose (?[A-Z0-9_]+) " | rex field=line max_match=1000 "ViVol: (?(?!user)[A-Za-z0-9_]+)\nUsage\s+:\s+(?[0-9.]+)[A-Za-z\s\n]+Limit\s+:\s+(?[0-9]+)[A-Za-z\s+()]+" | table fs, vivol, usage, limit ... View more