Splunk Search

Can someone help me with building a regular expression for the following search?

rndp89
Explorer

I have following data.

<Abc><def>adfasdf1234567890dfa</def></Abc>
<Abc><def>adfasdf17890dfa</def></Abc>

Ineed a regular expression which matches " to ".

I have tried the following regex but it matches to

<[^>]*>.*?\d{9,}.*?<[^>]*>
Tags (2)
0 Karma

kthammireddygar
Path Finder

Regex to match full string. Please try this

Regex: <[^>]*><[^>]*>.*?\d*.*?<\/[^>]*><\/[^>]*>

0 Karma

brian_rampley
Path Finder

Can you provide a few more details. It's not clear what you want to match. Your regex seems to match everything from the first two open tags to the first close tag of your XML.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...