https://community.splunk.com/t5/Getting-Data-In/unable-to-retrieve-string-from-a-big-string-with-special-symbols/m-p/115396#M24126 <P>Hi Wish to retrieve hammadahmad from below string. Below string contain html tag ( &amp; a p o s ; ) without space. </P> <UL> <LI> String = &amp;a pos;<STRONG>hammadahmad</STRONG>&amp;ap os; (service Active Directory)</LI> <LI>Current Regular Expression : | rex "Session login, user(?P/&lt;USER/&gt;.*?)logging in from machine"</LI> </UL> <P><span class="lia-inline-image-display-wrapper"><img src="https://community.splunk.com/t5/image/serverpage/image-id/462i2DE8D00534BF97EC/image-size/large?v=v2&amp;px=999" title="alt text" alt="alt text" /></span></P> <P>Any help will be appreciated.</P> Fri, 10 Jul 2015 02:28:53 GMT indianhans 2015-07-10T02:28:53Z https://community.splunk.com/t5/Getting-Data-In/unable-to-retrieve-string-from-a-big-string-with-special-symbols/m-p/115396#M24126 <P>Hi Wish to retrieve hammadahmad from below string. Below string contain html tag ( &amp; a p o s ; ) without space. </P> <UL> <LI> String = &amp;a pos;<STRONG>hammadahmad</STRONG>&amp;ap os; (service Active Directory)</LI> <LI>Current Regular Expression : | rex "Session login, user(?P/&lt;USER/&gt;.*?)logging in from machine"</LI> </UL> <P><span class="lia-inline-image-display-wrapper"><img src="https://community.splunk.com/t5/image/serverpage/image-id/462i2DE8D00534BF97EC/image-size/large?v=v2&amp;px=999" title="alt text" alt="alt text" /></span></P> <P>Any help will be appreciated.</P> Fri, 10 Jul 2015 02:28:53 GMT https://community.splunk.com/t5/Getting-Data-In/unable-to-retrieve-string-from-a-big-string-with-special-symbols/m-p/115396#M24126 indianhans 2015-07-10T02:28:53Z https://community.splunk.com/t5/Getting-Data-In/unable-to-retrieve-string-from-a-big-string-with-special-symbols/m-p/115397#M24127 <PRE><CODE>rex field=USERNAME "&amp;apos;(?&lt;user&gt;\S+)&amp;apos;" </CODE></PRE> Fri, 10 Jul 2015 07:31:28 GMT https://community.splunk.com/t5/Getting-Data-In/unable-to-retrieve-string-from-a-big-string-with-special-symbols/m-p/115397#M24127 sduff_splunk 2015-07-10T07:31:28Z