How to ignore tags inside hiddensearch module

[basanthp]

Hi, I am trying to perform field extractions in the searchtime using hiddensearch module.
the following search works fine in the search view but does not work within the hiddensearch module of the view.
Suspect this is due to '<' and '>' tags. How to ignore them?
My query:
index=abc sourcetype=xyz keyword | rex field=_raw "(?<'User_ID>\w+)\shas"

[MuS · Accepted solution]

Hi basanthp,

you have to use the < for < and the > for > in your XML code. Another method would be to use your search inside a CDATA tag. For more information read the docs on Simplified XML

Hope this helps ...

cheers, MuS