I have the following source field C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\ekPRANBAI\WEB-INF\executables\bin\ekPRUEBA\WEB-INF\cache\scripts\iperf-8998.txt . I want to extract 8998 into a suc_id field
Like this:
| rex field=source "(?<suc_id>\d+)\.txt$"
Tanks Woodcock
Depending on how varied the source field can be this could work.
... | rex field=source "-(?<suc_id>[\d]+)\.txt" | ...