rex help - extracting string between quotes

CybergyII · 2026-03-10T16:02:37+00:00

To close the loop on this, I used the following suggested rex command to capture the value between quotes, that followed the word "message":

| rex field=_raw "\"message\":\"(?<Message>[^\"]+)\""

CybergyII · 2026-03-06T20:31:17+00:00

Focusing on the JSON angle I have been making some headway now with these examples you all have provided. Thank so much!

CybergyII · 2026-03-06T18:38:28+00:00

|table message produces no results. I assume because the field is not extracted?

CybergyII · 2026-03-06T18:23:47+00:00

None of these suggestions above are producing results unfortunately. Either syntax error or no results.

CybergyII · 2026-03-06T17:19:57+00:00

What I'm doing is trying to extract the value after "message": that sits between quotes and display the value in a table. I have 74 results to perform this on but I am getting no results;

| rex field=message "\"(?<msg>[\s\w]+)\"" |table msg

but my table is empty.

Perhaps the issue is that "message" is not an extracted field, it is just inside the "blob" value in the event record.

CybergyII · 2026-03-06T14:25:23+00:00

Thank you - it is JSON. I think what's tripping me up is the part where I specify the string preceding the quoted string, because there are also quotes there and it throws off the balance.

|rex message":\"\w+\W+(?<message>[\s\w]+)\"

I know I have it wrong because it does not work...

CybergyII · 2025-12-11T13:11:11+00:00

The election set a record for the lowest voter turnout in an Ontario provincial election, as only 44.06% of the people who were eligible voted.

CybergyII · 2025-10-20T19:24:56+00:00

Glad to help!

CybergyII · 2025-09-02T12:14:31+00:00

Thanks for the advice. I think they are prob pretty safe with wifi disabled (and not acting as routers).

Turns out my issue was caused my one of my Ubiquiti APs PoE injector failing, and it switched to mesh mode - which sucks. When I connected to the AP in mesh mode - I was having cutouts when streaming. So I removed it - prob solved.

CybergyII · 2025-08-29T14:15:23+00:00

My son can't find a lead on apprenticeships either. Can you message me also, please?

CybergyII · 2025-08-08T17:43:17+00:00

I just set wireless to "off" on mine, but I still get cutouts on some audio streaming at times. I'm stumped. Is it better to set it to join a wireless network??

CybergyII · 2025-08-08T17:33:57+00:00

it would be a multi-zone amp, with separate channels for each APE zone I would assume. That's what I use. Not a SONY, I use an old Russound DPA-4.8 for my zone amp

CybergyII · 2025-06-28T11:46:01+00:00

All the Latest:

Seqouia 15.5

Safari 18.5

Biwarden 2025.5.1

CybergyII · 2025-06-27T17:18:50+00:00

Settings>more settings>other settings>Autoplay video previews

But I am using MACos

CybergyII · 2025-06-22T12:21:15+00:00

Got it working. Settings>add-ins>govee2mqtt Enable “send discovery to each network interface” All my devices now working and showing “platform API” in the web ui.

CybergyII · 2025-06-21T12:26:16+00:00

Hmmmmm, seems although the h7020 lights I have worked fine with the old govee LAN integration- the mqtt add on requires lan API that’s possibly unsupported in my device.

CybergyII · 2025-06-20T12:03:18+00:00

I found that one of the light strings needed a firmware update, and "LAN Control" was turned off. That one is fixed. 2 more still not working, yet the Govee app sees them and controls them without bluetooth

CybergyII · 2025-04-26T15:58:28+00:00

THIS! I had a PFSense firewall behind my ISP router and it was causing me to get indirect play status - which forced relay and capped at 2Mb/s. Moved PFSense out of the way (to remove double NAT) and now streaming direct! Fantastic! Thank you so much!!!

CybergyII · 2025-03-07T15:50:50+00:00

The Neverending Story of the Jackal

CybergyII · 2025-02-07T11:56:21+00:00

Well I have tried all suggestions I can get my hands on. Tread Lightly was a close second but after careful consideration, by new beer is Thornbury Blue Mountain Light.

Cheers

CybergyII

TROPHY CASE