TLD Parser

Comments

7 comments

  • Avatar
    Azriel Nguyen

    hey Austin, 

    try this:

    | parse regex field=domain_lookup"(?<tld1>[^\.]*)(?=\n)"

     

    assuming that a newline is following the tld1

  • Avatar
    Austin Sandland

    Hey Azriel, 

    That is also not working. The log is tab delimited. 

    | domain as domain_lookup
    | parse regex field=domain_lookup"(?<tld1>[^\.]*)(?=\t)" 

    This search came back with www. for example, not .com 

  • Avatar
    Azriel Nguyen

    change "\n" to "\s" if followed by space. good luck

     

  • Avatar
    Austin Sandland

    | domain as domain_lookup
    | parse regex field=domain_lookup"(?<tld1>[^\.]*)(?=\s)"

     

    No search results found. Any other ideas?

  • Avatar
    Azriel Nguyen

    hey Austin, 

    hopefully this will work for you: (?=$)

     

    Sorry I was in meeting

  • Avatar
    Austin Sandland

    Hey Azriel, 

    That worked! Thanks for your help!

    | domain as domain_lookup
    | parse regex field=domain_lookup"(?<tld1>[^\.]*)(?=$)"

  • Avatar
    Azriel Nguyen

    sweet! happy to help :)

Please sign in to leave a comment.