domain
Domain
The domain
subcommand is used to extract the domain component from a hostname based on the public suffix list.
| eval domain = domain(<expression>)
Tld
The tld
subcommand is used to extract the top level domain (TLD) component from a hostname based on the public suffix list.
| eval tld = tld(<expression>)