Skip to main content
Question

How to extract user from regex in search?

  • 28 June 2024
  • 0 replies
  • 40 views

Hello folks, 

I am attempting to extract data for users who have browsed torrents. I've applied a regex query to match users, but it's returning all users instead of only those matching the regex.

Here is a query : "user"=* application=bittorrent | process regex("^"a-zA-Z]\.\a-zA-Z]+\d*\.\d{2}$",user ) 

If anyone know what I am missing, love to hear. 

Thanks 

0 replies

Be the first to reply!

Reply