Splunk Search

Data Model Regex - Matching on Angle Bracket (<)

David
Splunk Employee
Splunk Employee

I amy trying to use an angle bracket (< or >) as part of the raw text criteria for a regex in a data model using 6.0.3. Each time I try, it considers the angle bracket part of a new matched field, and I've not been able to successfully escape it. I've tried & gt; or & lt;, I've tried the single backslash that works in rex, and I've tried double and triple backslash to no avail.

Anyone able to help me out?

Tags (2)
0 Karma
1 Solution

David
Splunk Employee
Splunk Employee

Received a response out of band. This is a known issue, and a fix is planned for a coming release. In my specific case, I was able to solve the problem by matching on [^a-zA-Z0-9_\s=] which met my requirement.

View solution in original post

0 Karma

David
Splunk Employee
Splunk Employee

Received a response out of band. This is a known issue, and a fix is planned for a coming release. In my specific case, I was able to solve the problem by matching on [^a-zA-Z0-9_\s=] which met my requirement.

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...