@SabariRajanT  If you don't want to create new field, use simple rex mode=sed | makeresults | eval url="ws.chatgpt.com/re/user/sdsdssdsd?verify=1757077758" | rex field=url mode=sed "s:/.*::" | table url If you want to create new fields like domain/url for creating any visualization/reporting use below,   | makeresults count=1 | eval raw_log="ws.chatgpt.com/re/user/sdsdssdsd?verify=1757077758-CSPsqhWt%sdserere%2BJ7IesevE6CTs%3D,win-extension.femrerere.grammarly.io/batch/import" | makemv delim="," raw_log | mvexpand raw_log | rex field=raw_log "^(?<domain>[^/]+)" | table raw_log domain Regards, Prewin If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks! ... View more