REGEX

[whitecat001]

Hello 

Can i get a regex that matches with this;  permission=Permission12345. I have tried to bring up one but its not working. Thanks in advance 

[gcusello]

Hi @whitecat001 ,

you can use the regex hinted  by @ITWhisperer , but when you ha a pais fieldnem=fieldvalue, as in your case, you could simply use the field for searching your data:

index=your_index permission=Permission12345
| ...

Ciao.

Giuseppe

[ITWhisperer]

| regex permission="Permission12345"