title: Splunk Rex Expression
body: <p>I wonder whether someone could possibly help me please.</p>
  
  <p>Firstly my apologies for what may seem a simple question, but I'm really struggling with this.</p>
  
  <p>I'm trying to extract a nino field from my raw data in Splunk which is in the following format <code>"nino\":\"AB123456A\"</code>. </p>
  
  <p>I've read quite a number of tutorials this morning, but I've still not been able to find the 'Rex' expression for this. I just wondered whether someone may be able to provide some guidance on what the 'Rex' expression would be for this.</p>