Combination of uri patterns

[xvxt006]

Hi,

i would like to capture the below 2 patterns and i tried to use the below combination but i am not getting intended results. Can someone help

/product/Dsdhty-wetds-Cartridge-3456er?s_pp=false

/search?searchQuery=1DAH1

Tried this..
| (uri=/product/* OR regex uri="/search\?searchQuery=\w{5}$")

[lukejadamec]

You're missing a slash before the w.

\w{5}$

Well, I don't think you can use an OR with a regex, and a subsearch won't work. You can append the results. Here is an example for pulling two series of EventCodes.

index=main EventCode="5*" |stats count by EventCode |append [search index=main EventCode="*" | regex EventCode="^4\d+" |stats count by EventCode]

[lukejadamec]

I updated the answer with an example of append.

[lukejadamec]

Highlight the string and click the 101010 format option to capture the special characters.

[xvxt006]

Actually for some reason it is not showing the backslash when i put it but i do have it in my query 🙂