Dashboards & Visualizations

Regex $ (End of Line) in a Dashboard Is Seen as a Token

bschaap
Path Finder

Including a $ (end of line anchor) character in two regular expressions within a search on a dashboard is seen as a token. Is there a way for the $ characters be seen as end of line anchors instead?

Tags (1)
1 Solution

DalJeanis
Legend

Within the SPL in XML, you need to escape a $ with another $.

View solution in original post

DalJeanis
Legend

Within the SPL in XML, you need to escape a $ with another $.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...