@ITWhisperer the first part from | rex "empid=(?<empid>[^\]]+).*empuniqid=(?<empuniqid>[^%]+)"
| table empid empuniqid I mean the empid is able to fetch but the empuniqid is not actually for some fields there is no %, I want the data from the raw data from the middle and there is no delimiter ; Please refer the below example for more understanding : [2021--2-12][info][xyz][empid=12345][cliner=123]....and so on... and empuniqid=123%abcd ..and so on. and some times my data varies to [2021--2-12][info][xyz][empid=12345][cliner=123]....and so on... and empuniqid=12345678 ..and so on. I want 1234 from second line and 123 from first line, Thank you so much for you help
... View more