Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Help with regex whitelist
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I need to whitelist files that match this format in a directory. Hoping someone can help me....
WebAPIServ_RTP_L1.20160102_171339_084.log
WebAPIServ_RTP_L2.20160216_225645_002.log
WebAPIServ_MMK_L1.20160102_171339_084.log
WebAPIServ_MMK_L2.20160216_225645_022.log
WebAPIServ_OMA_L1.20160102_171339_084.log
WebAPIServ_OMA_L2.20160216_225645_022.log
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you're looking for just regex, depending on how specific you want it. Something like this might work:
WebAPIServ_[A-Z]{3}_L(1|2)\.\d{8}_\d{6}_\d{3}.log
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you're looking for just regex, depending on how specific you want it. Something like this might work:
WebAPIServ_[A-Z]{3}_L(1|2)\.\d{8}_\d{6}_\d{3}.log
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Good places to play and define your regex:
http://www.regexr.com/
https://regex101.com/
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Awesome. Great example as well.
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yup. Happy to help. If it works for you please accept as the answer. Thanks!
Data Management Digest – December 2025
Index This | What is broken 80% of the time by February?
Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...
