Regarding rex in SPL2 supports raw string literals.

[inventsekar]

Dear Splunk Gurus, 
Pls find these lines in the given page below:
Differences between SPL and SPL2
The differences between the SPL and SPL2 rex command are described in these sections.

Support for raw string literals

SPL2 supports raw string literals.

https://help.splunk.com/en/splunk-cloud-platform/search/spl2-search-reference/rex-command/rex-comman...

(removed the extended example in this table below)

Version Example

SPL	...rex "From: (?<from>.*) To: (?<to>.*)" field=myfield
SPL2	...rex field=myfield "From: (?<from>.*) To: (?<to>.*)"

Could you pls give me an example, with the "raw string literals" sample log line, so that, learners can understand it easily.

[richgalloway]

The best way to get clarification on a Documentation page is to submit feedback on the page.  Click the "Share feedback" button at the bottom of the page.