https://community.splunk.com/t5/Splunk-Search/Ingest-processor-rex-problem/m-p/740986#M240510 <P>Thanks Sainag,</P><P>Just confusing doco then as this page:&nbsp;<A href="https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample" target="_blank">https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample</A></P><P>which is all about SPL2&nbsp;</P><P>in section 2 has examples without the P after the ?&nbsp;</P><P>but section 3 has the P</P><P>all good, thanks</P> Thu, 06 Mar 2025 03:03:47 GMT Keith_NZ 2025-03-06T03:03:47Z https://community.splunk.com/t5/Splunk-Search/Ingest-processor-rex-problem/m-p/740867#M240489 <P>Hi,</P><P>I am new to Ingest Processor and have had some success but am having an issue with the rex command so I have created a very simple example copied from the manual here&nbsp;<A href="https://docs.splunk.com/Documentation/SCS/current/SearchReference/RexCommandExamples#2._Regular_expressions_with_character_classes" target="_blank">https://docs.splunk.com/Documentation/SCS/current/SearchReference/RexCommandExamples#2._Regular_expressions_with_character_classes</A></P><P>But I am getting this error:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Keith_NZ_1-1741132027512.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/38013i1234123DE11E8425/image-size/medium?v=v2&amp;px=400" role="button" title="Keith_NZ_1-1741132027512.png" alt="Keith_NZ_1-1741132027512.png" /></span></P><P>Any ideas why?</P><P>Thanks</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 04 Mar 2025 23:49:50 GMT https://community.splunk.com/t5/Splunk-Search/Ingest-processor-rex-problem/m-p/740867#M240489 Keith_NZ 2025-03-04T23:49:50Z https://community.splunk.com/t5/Splunk-Search/Ingest-processor-rex-problem/m-p/740982#M240509 <P>&nbsp;</P><OL><LI>Traditional SPL: (?&lt;name&gt;pattern)</LI><LI>SPL2 (Edge/Ingest Processor): (?P&lt;name&gt;pattern)</LI></OL><P>&nbsp;</P> Thu, 06 Mar 2025 00:08:48 GMT https://community.splunk.com/t5/Splunk-Search/Ingest-processor-rex-problem/m-p/740982#M240509 sainag_splunk 2025-03-06T00:08:48Z https://community.splunk.com/t5/Splunk-Search/Ingest-processor-rex-problem/m-p/740986#M240510 <P>Thanks Sainag,</P><P>Just confusing doco then as this page:&nbsp;<A href="https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample" target="_blank">https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample</A></P><P>which is all about SPL2&nbsp;</P><P>in section 2 has examples without the P after the ?&nbsp;</P><P>but section 3 has the P</P><P>all good, thanks</P> Thu, 06 Mar 2025 03:03:47 GMT https://community.splunk.com/t5/Splunk-Search/Ingest-processor-rex-problem/m-p/740986#M240510 Keith_NZ 2025-03-06T03:03:47Z