https://community.splunk.com/t5/Splunk-Search/regular-expression/m-p/19680#M177265 <P>Help me with a regular expression to include all the log details after a certain field,including newline tab etc something(?P<RESTOFLOGEVENT>.*) is not working, it is excepting new line..<BR /> Thanks<BR /> Bella</RESTOFLOGEVENT></P> Tue, 05 Feb 2013 10:13:31 GMT bellaed 2013-02-05T10:13:31Z https://community.splunk.com/t5/Splunk-Search/regular-expression/m-p/19680#M177265 <P>Help me with a regular expression to include all the log details after a certain field,including newline tab etc something(?P<RESTOFLOGEVENT>.*) is not working, it is excepting new line..<BR /> Thanks<BR /> Bella</RESTOFLOGEVENT></P> Tue, 05 Feb 2013 10:13:31 GMT https://community.splunk.com/t5/Splunk-Search/regular-expression/m-p/19680#M177265 bellaed 2013-02-05T10:13:31Z https://community.splunk.com/t5/Splunk-Search/regular-expression/m-p/19681#M177266 <P>You need to need the <CODE>s</CODE> regex modifier.</P> <PRE><CODE>(?s)(?&lt;restoflogevent&gt;.*) </CODE></PRE> <P><A href="http://www.regular-expressions.info/modifiers.html">http://www.regular-expressions.info/modifiers.html</A></P> Tue, 05 Feb 2013 10:39:52 GMT https://community.splunk.com/t5/Splunk-Search/regular-expression/m-p/19681#M177266 Ayn 2013-02-05T10:39:52Z https://community.splunk.com/t5/Splunk-Search/regular-expression/m-p/19682#M177267 <P>With Build regex expression <B>test</B> it is working fine, but <BR /> ...|table restoflogevent<BR /> gives the same result.</P> Tue, 05 Feb 2013 11:00:12 GMT https://community.splunk.com/t5/Splunk-Search/regular-expression/m-p/19682#M177267 bellaed 2013-02-05T11:00:12Z