Hi all. I'm fairly new to Splunk and regex. I've got many event logs and I'm making use of data models beforing generating different visualisations.   The fields discovered isn't good enough for my usecase thus I need to extract specific fields. Right now, using the following regex   (?<field_name>(([a-zA-Z]+(\.[a-zA-Z]+)+)_([a-zA-Z]+(|[a-zA-Z]+)+)|/^([^.]+)/))   , I'm able to extract this pattern    ABC|DEF|GHI   most accurately.  Subsequently, I would like extract each respective word into its own field. In total 3 different fields for ABC, DEF and GHI respectively. Is there a way I extract each individual word? How can perform regex expression on top of my current regex expression result? Thank you. ... View more