About anrak33

ITWhisperer · ‎02-23-2023

If you do it like this, it would cope with either situation. | rex max_match=0 "ttl_ios\\\\\",.*?\\\\\"v\\\\\":\\\\\"(?<ttl_ios>[^\"]+)\\\\\""

gcusello · ‎01-23-2023

Hi @anrak33, good for you, see next time! Ciao and happy splunking Giuseppe P.S.: Karma Points are appreciated 😉

Online Status	Offline
Date Last Visited	‎02-23-2023 12:09 PM

Count based on wildcard in search