Regex help- Why am I getting error "Regex: quantifier doesn't follow a repeatable item"?

[SplunkEmp22]

Hi sorry for my direct question. This match it's in eval and i get the error "Regex: quantifier doesn't follow a repeatable item".

Do u know where it's the issue? Thank u

[ITWhisperer]

The first * is not required

[SplunkEmp22]

i want to match only all the words before and after User enabled, i tried to remove the first *, but it doesn't match anymore all the words before User

[ITWhisperer]

Match() is going to return true or false depending on whether the field matches the pattern - what is the pattern you are trying to find e.g. the field must contain "user enabled" with one or more words before it and zero or more words after it?

Have you considered using + rather than * so you get at least one of the preceding characters?

Also, try your regex in regex101.com as a great way to check you have got the expression right - it also will explain what your expression means.