Support Questions
Find answers, ask questions, and share your expertise

ExtractText picking up the first match.

Explorer

I have an event  {

"a":"avc123.abc.com",
"b":"24 - ny",
"c" : "21321kodi"
}

i would like to use extracttext to filter/extract only the "b" however, it is picking up the first match. How can I specify to extract text from field "b" only not "a" neither "c"


1 ACCEPTED SOLUTION

Accepted Solutions

Super Guru

@ANMAR 

Try with this regex

(?:"b"\s*:\s*)"(.*?)",

This will extract only 24 - ny value from the given event

View solution in original post

2 REPLIES 2

Super Guru

@ANMAR 

Try with this regex

(?:"b"\s*:\s*)"(.*?)",

This will extract only 24 - ny value from the given event

View solution in original post

Explorer

Found the solution! 
Just needed to apply the regex 

(?:"b":.\w+?)(\d+)

thanks to @Shu_ashu