<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Regex help for a newby please in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531050#M89355</link>
    <description>&lt;P&gt;That's a special character in the regex world.&amp;nbsp; Treat it as a normal character by escaping it with '\'.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;([\r\n]+)\s*\(&lt;/LI-CODE&gt;</description>
    <pubDate>Thu, 26 Nov 2020 19:49:20 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2020-11-26T19:49:20Z</dc:date>
    <item>
      <title>Regex help for a newby please</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531048#M89354</link>
      <description>&lt;P&gt;Hi All,&amp;nbsp; looking for some assistance on what a regex would look like when every new line starts with an open bracket e.g. (&lt;/P&gt;&lt;P&gt;I am a complete novice with regex so asking how this would be achieved.&amp;nbsp; I kinda understand the error - just not how to resolve.&lt;/P&gt;&lt;P&gt;my error is (from btool.log)&lt;/P&gt;&lt;P&gt;btool-support - Bad regex value: '([\r\n]+)\s*('', of param: props.conf / [&amp;lt;sourcetype] / LINE_BREAKER; why: missing closing parenthesis&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Many thanks&lt;/P&gt;</description>
      <pubDate>Thu, 26 Nov 2020 19:41:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531048#M89354</guid>
      <dc:creator>markturner14</dc:creator>
      <dc:date>2020-11-26T19:41:27Z</dc:date>
    </item>
    <item>
      <title>Re: Regex help for a newby please</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531050#M89355</link>
      <description>&lt;P&gt;That's a special character in the regex world.&amp;nbsp; Treat it as a normal character by escaping it with '\'.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;([\r\n]+)\s*\(&lt;/LI-CODE&gt;</description>
      <pubDate>Thu, 26 Nov 2020 19:49:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531050#M89355</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-11-26T19:49:20Z</dc:date>
    </item>
    <item>
      <title>Re: Regex help for a newby please</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531067#M89359</link>
      <description>&lt;P&gt;welcome&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225423"&gt;@markturner14&lt;/a&gt;&amp;nbsp;to the wonderful world of regular expressions!&amp;nbsp;&lt;BR /&gt;hopefully the issue is resolved now i think.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please accept&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;'s post or any post closer to your fix, choose it and accept it as the solution.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Best Regards,&lt;/P&gt;&lt;P&gt;Sekar&lt;/P&gt;&lt;P&gt;PS - your karma points will be my 2 cents!&lt;/P&gt;</description>
      <pubDate>Thu, 26 Nov 2020 20:50:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531067#M89359</guid>
      <dc:creator>inventsekar</dc:creator>
      <dc:date>2020-11-26T20:50:20Z</dc:date>
    </item>
    <item>
      <title>Re: Regex help for a newby please</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531080#M89360</link>
      <description>&lt;P&gt;Perfect,&amp;nbsp; thanks&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp; and all for the fast supportive responses.&lt;/P&gt;&lt;P&gt;Works as expected&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 26 Nov 2020 21:38:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Regex-help-for-a-newby-please/m-p/531080#M89360</guid>
      <dc:creator>markturner14</dc:creator>
      <dc:date>2020-11-26T21:38:53Z</dc:date>
    </item>
  </channel>
</rss>

