Archive

How to ignore tags inside hiddensearch module

Path Finder

Hi, I am trying to perform field extractions in the searchtime using hiddensearch module.
the following search works fine in the search view but does not work within the hiddensearch module of the view.
Suspect this is due to '<' and '>' tags. How to ignore them?
My query:
index=abc sourcetype=xyz keyword | rex field=_raw "(?<'User_ID>\w+)\shas"

Tags (1)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

Hi basanthp,

you have to use the &lt; for < and the &gt; for > in your XML code. Another method would be to use your search inside a CDATA tag. For more information read the docs on Simplified XML

Hope this helps ...

cheers, MuS

View solution in original post

SplunkTrust
SplunkTrust

Hi basanthp,

you have to use the &lt; for < and the &gt; for > in your XML code. Another method would be to use your search inside a CDATA tag. For more information read the docs on Simplified XML

Hope this helps ...

cheers, MuS

View solution in original post