I upgraded to Splunk 6.3.3 and am running TA-cisco_ios 2.3.2 and when I restart Splunk I am getting the following errors:
Bad regex value: '%SYS-.+-CONFIG_I(\s)?: Configured from (?(?!memory).+) by (?(?!snmp)\S+)(\s\on)?\s?(?\w+)?(\s((?\S+)?))?', of param: props.conf / [cisco:ios] / EXTRACT-cisco_ios-config_change; why: missing opening brace after \o
Bad regex value: 'ERR_DISABLE(\s)?:\s(?
Any ideas on what needs to be fixed?
This is just a cosmetic error, but you may get an updated version at http://github.com/inspired/TA-cisco_ios where this is fixed.