Need to find the particular value from a sentance

[Anonymous]

I am in the process of creating a report with the list of ticket # and the computer name.

My data will be like ... Col A is the ticket # and Col B is the email alert which will be captured in the description field of ticket.

Now I would like to create a table chart/box which has to show the ticket # in first column (which is possible and I know), Then in second column I need the Computer name which is ABCD1238.eu.corp (I dont know how to do it). Is this possible?

Col A	Col B
12345	From: ch.alerts@abcd.com Sent: Thursday, March 05, 2015 6:01 PM To: Security.IncidentResponseTeam Subject: Forefront Endpoint Protection Alert: Malware Detection Forefront Endpoint Protection has detected malware on a computer in your organization. Detection time (UTC): 3/5/2015 11:54:32 AM Computer name: ABCD1238.eu.corp Malware name: BrowserModifier:Win32/KipodToolsCby

[Colin-Albert]

You can use something like this, but you may need to force upper() or lower() as QlikView is case sensitive

load

     ColB,

     textbetween(ColB, 'Computer Name', 'Malware') as ComputerName

from ....

[Anonymous]

Thanks everyone. I have got the Computer name: Any suggestions to get the Malware name: ?

[anbu1984 · Accepted solution]

If Malware is on last line, then try this

TextBetween(Desc & '#','Malware name:','#') & '.corp' As MlwrNm

[Anonymous]

Simply Genius...

[Anonymous]

Anbu in some rows of Description field the  instead of Malware name: it will be Number of malware types:

as shown below. Can we include multiple conditions in the same script ? to achieve this

TextBetween(Desc & '#','Malware name:','#') & '.corp' As MlwrNm

From: aaaaaaaaaaaaaaaaaaa

Sent: Monday, December 15, 2014 3:46 PM

To: Security.IncidentResponseTeam

Subject: Forefront Endpoint Protection Alert: Multiple Malware Detection
Forefront Endpoint Protection has detected multiple types of malware on a computer in your organization.

Computer name: IGL-LT080.ap.corp

Number of malware types: 4

Detection interval (minutes): 1440

[anbu1984]

If(Index(Desc,'Number of malware types'),TextBetween(Desc,'Number of malware types:','Detection ') ,

TextBetween(Desc & '#','Malware name:','#') ) As MlwrNm

[Anonymous]

Thanks Anbu.. Sorry for bothering you again and again. some rows having Malware Name instead of Malware name (n is in capital). is there any way to add another condition in the same or to make name not as case sensitive...

[anbu1984]

If(Index(Desc,'Number of malware types'),TextBetween(Desc,'Number of malware types:','Detection ') ,

If(Index(Desc,'Malware name'),TextBetween(Desc & '#','Malware name:','#') ,TextBetween(Desc & '#','Malware Name:','#')) ) As MlwrNm

Or

If(Index(Desc,'Number of malware types'),TextBetween(Desc,'Number of malware types:','Detection ') ,

TextBetween(Upper(Desc) & '#','MALWARE NAME:','#') ) As MlwrNm