I'd like to use rex to extract the event string that starts with certain words or letters, possibly ends with certain words or letters. For example I have a event string like "blah blah blah Start blah blah blah End".
I can do something like:
mySearch|rex field=_raw "Start(?<"myField">.*)End"
I want my result not only "myField" but also including "Start" and "End". How can I do it?
↧