About 27,700 results
Open links in new tab
  1. Solved: How to extract and filter fields with rex and rege... - Splunk ...

    Jul 25, 2023 · Solved: Hi I need help to extract and to filter fields with rex and regex 1) i need to use a rex field on path wich end by ".exe" Example :

  2. Rex to extract string with words and characters - Splunk Community

    Dec 8, 2023 · Solved: Looking for help with this rex command. I want to capture the continuous string after "invalid user" whether it has special

  3. Can you pass a regex as field value to the rex command - Splunk …

    Mar 5, 2025 · Hi , at first, please in addition to the screenshots, add also the code and a sample of your logs in text format using the "Add/Edit Code sample" button. Then, if you are doing an …

  4. Solved: Multiple rex expressions - Splunk Community

    Jul 8, 2021 · Hi @subspacefield , if that is exactly how you have in your search then there are 2 issues. for rex - you need to tell it what to look at: Rex works as you would read something - …

  5. Solved: How to extract data using rex? - Splunk Community

    Dec 2, 2020 · Hi all, I am having data as follows: REPORT RequestId: xxxx2722-xx0d-xx35-95xx-xxxxxxb6b2e1 i want a field as CorrelationId3 which is having xxxx2722-xx0d-xx35-95xx …

  6. Solved: how to use the rex command to extract data when we.

    Feb 7, 2020 · Hi have a scenario, where I would like to extract the field OfferCode which has space after and before the code: OfferCode : XYZAQERWSD Please help with rex command …

  7. Solved: Using Rex to pull out a file path , file name and ... - Splunk ...

    Feb 8, 2021 · Solved: Hi all, I'm new to splunk searches and would appreciate some help to find out how to pull out the file path, file name and file extension

  8. Solved: How to extract with rex from the beginning of a st.

    Jul 2, 2018 · Solved: How do I write a rex command to extract from up to a particular delimiter (such as comma) or (if there is no delimiter) to the end of string?

  9. Solved: How to extract Splunk rex field? - Splunk Community

    Oct 25, 2021 · Hi There, I have a query that I use to extract all database modifications. However, I want to exclude SELECT from capturing via this query. I want to extract only INSERT, …

  10. Solved: How to use rex command to extract two fields and c.

    Sep 18, 2014 · How to use rex command to extract two fields and chart the count for both in one search query?