Splunk Search
Highlighted

How to write a regular expression so that it’s case sensitive and only looks at ABC and not Abc or abc?

Path Finder

Please let me know the regex for this.
How can the extracted field be modified?

Thanks

Highlighted

Re: How to write a regular expression so that it’s case sensitive and only looks at ABC and not Abc or abc?

Super Champion

[ABC] should only look at ABC and not Abc or abc. However, :upper and :lower can be used, and i makes things case insensitive.

you can test regexes here: https://regex101.com/

Highlighted

Re: How to write a regular expression so that it’s case sensitive and only looks at ABC and not Abc or abc?

Motivator

How about trying this:

(ABC) which matches ABC as a string and does not match Abc or abc see here

[ABC] on the other hand will match either A, B or C see here

[ABC]+ will match any combinations of one or more ABCs like AABBCC, ABC, Abc (A is matched in Abc ) and so on... see here

So please use accordingly.

View solution in original post

0 Karma