Splunk Search

Can someone help me with building a regular expression for the following search?

rndp89
Explorer

I have following data.

<Abc><def>adfasdf1234567890dfa</def></Abc>
<Abc><def>adfasdf17890dfa</def></Abc>

Ineed a regular expression which matches " to ".

I have tried the following regex but it matches to

<[^>]*>.*?\d{9,}.*?<[^>]*>
Tags (2)
0 Karma

kthammireddygar
Path Finder

Regex to match full string. Please try this

Regex: <[^>]*><[^>]*>.*?\d*.*?<\/[^>]*><\/[^>]*>

0 Karma

brian_rampley
Path Finder

Can you provide a few more details. It's not clear what you want to match. Your regex seems to match everything from the first two open tags to the first close tag of your XML.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...