https://community.splunk.com/t5/Splunk-Search/Help-Combining-2-regex-searches/m-p/52494#M12759 <P>If by combine you mean find events matching at least one of the regular expressions, use the pipe symbol to get a regex "or":</P> <PRE><CODE>... | regex log_id="(4454[4-7])|(32[0-5][0-4][0-9])" </CODE></PRE> Fri, 31 May 2013 23:25:25 GMT martin_mueller 2013-05-31T23:25:25Z https://community.splunk.com/t5/Splunk-Search/Help-Combining-2-regex-searches/m-p/52493#M12758 <P>hi,<BR /> i have been trying to combine these two searches together. can some one please help combine them.</P> <P>first search: index=pci_hpd_index device_id=FGT* | regex log_id="4454[4-7]"</P> <P>second search: index=pci_hpd_index device_id=FGT* | regex log_id="32[0-5][0-4][0-9]"</P> Mon, 28 Sep 2020 14:01:21 GMT https://community.splunk.com/t5/Splunk-Search/Help-Combining-2-regex-searches/m-p/52493#M12758 ssehgal 2020-09-28T14:01:21Z https://community.splunk.com/t5/Splunk-Search/Help-Combining-2-regex-searches/m-p/52494#M12759 <P>If by combine you mean find events matching at least one of the regular expressions, use the pipe symbol to get a regex "or":</P> <PRE><CODE>... | regex log_id="(4454[4-7])|(32[0-5][0-4][0-9])" </CODE></PRE> Fri, 31 May 2013 23:25:25 GMT https://community.splunk.com/t5/Splunk-Search/Help-Combining-2-regex-searches/m-p/52494#M12759 martin_mueller 2013-05-31T23:25:25Z https://community.splunk.com/t5/Splunk-Search/Help-Combining-2-regex-searches/m-p/52495#M12760 <P>thanks that helped a lot. it works now.</P> Tue, 04 Jun 2013 15:54:18 GMT https://community.splunk.com/t5/Splunk-Search/Help-Combining-2-regex-searches/m-p/52495#M12760 ssehgal 2013-06-04T15:54:18Z