Hi Andrea, Am Dienstag, 25. November 2014 09:29:02 UTC+1 schrieb Andrea Consadori: > > "aaa (bbb) cccc (ddd) " > > how can i create a regex that say take only the text in the second > parenthesis? >
You can use a *non-capturing group* for this (see http://www.graylog2.org/resources/documentation/general/extractors). In your case the regular expression with the non-capturing group for "bbb" would be "aaa (?:bbb) cccc (ddd)". Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.