<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Can someone help me with building a regular expression for the following search? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Can-someone-help-me-with-building-a-regular-expression-for-the/m-p/406537#M117487</link>
    <description>&lt;P&gt;I have following data.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;Abc&amp;gt;&amp;lt;def&amp;gt;adfasdf1234567890dfa&amp;lt;/def&amp;gt;&amp;lt;/Abc&amp;gt;
&amp;lt;Abc&amp;gt;&amp;lt;def&amp;gt;adfasdf17890dfa&amp;lt;/def&amp;gt;&amp;lt;/Abc&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Ineed a regular expression which matches " to ".&lt;/P&gt;

&lt;P&gt;I have tried the following regex but it matches  to &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;[^&amp;gt;]*&amp;gt;.*?\d{9,}.*?&amp;lt;[^&amp;gt;]*&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Mon, 13 Aug 2018 04:59:12 GMT</pubDate>
    <dc:creator>rndp89</dc:creator>
    <dc:date>2018-08-13T04:59:12Z</dc:date>
    <item>
      <title>Can someone help me with building a regular expression for the following search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Can-someone-help-me-with-building-a-regular-expression-for-the/m-p/406537#M117487</link>
      <description>&lt;P&gt;I have following data.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;Abc&amp;gt;&amp;lt;def&amp;gt;adfasdf1234567890dfa&amp;lt;/def&amp;gt;&amp;lt;/Abc&amp;gt;
&amp;lt;Abc&amp;gt;&amp;lt;def&amp;gt;adfasdf17890dfa&amp;lt;/def&amp;gt;&amp;lt;/Abc&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Ineed a regular expression which matches " to ".&lt;/P&gt;

&lt;P&gt;I have tried the following regex but it matches  to &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;[^&amp;gt;]*&amp;gt;.*?\d{9,}.*?&amp;lt;[^&amp;gt;]*&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 13 Aug 2018 04:59:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Can-someone-help-me-with-building-a-regular-expression-for-the/m-p/406537#M117487</guid>
      <dc:creator>rndp89</dc:creator>
      <dc:date>2018-08-13T04:59:12Z</dc:date>
    </item>
    <item>
      <title>Re: Can someone help me with building a regular expression for the following search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Can-someone-help-me-with-building-a-regular-expression-for-the/m-p/406538#M117488</link>
      <description>&lt;P&gt;Can you provide a few more details.  It's not clear what you want to match.  Your regex seems to match everything from the first two open tags to the first close tag of your XML.&lt;/P&gt;</description>
      <pubDate>Mon, 13 Aug 2018 06:36:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Can-someone-help-me-with-building-a-regular-expression-for-the/m-p/406538#M117488</guid>
      <dc:creator>brian_rampley</dc:creator>
      <dc:date>2018-08-13T06:36:41Z</dc:date>
    </item>
    <item>
      <title>Re: Can someone help me with building a regular expression for the following search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Can-someone-help-me-with-building-a-regular-expression-for-the/m-p/406539#M117489</link>
      <description>&lt;P&gt;Regex to match full string. Please try this&lt;/P&gt;

&lt;P&gt;Regex: &lt;CODE&gt;&amp;lt;[^&amp;gt;]*&amp;gt;&amp;lt;[^&amp;gt;]*&amp;gt;.*?\d*.*?&amp;lt;\/[^&amp;gt;]*&amp;gt;&amp;lt;\/[^&amp;gt;]*&amp;gt;&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 13 Aug 2018 07:05:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Can-someone-help-me-with-building-a-regular-expression-for-the/m-p/406539#M117489</guid>
      <dc:creator>kthammireddygar</dc:creator>
      <dc:date>2018-08-13T07:05:19Z</dc:date>
    </item>
  </channel>
</rss>

