- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Keith_NZ
Explorer
4 weeks ago
Hi,
I am new to Ingest Processor and have had some success but am having an issue with the rex command so I have created a very simple example copied from the manual here https://docs.splunk.com/Documentation/SCS/current/SearchReference/RexCommandExamples#2._Regular_expr...
But I am getting this error:
Any ideas why?
Thanks
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
sainag_splunk

Splunk Employee
3 weeks ago
- Traditional SPL: (?<name>pattern)
- SPL2 (Edge/Ingest Processor): (?P<name>pattern)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
sainag_splunk

Splunk Employee
3 weeks ago
- Traditional SPL: (?<name>pattern)
- SPL2 (Edge/Ingest Processor): (?P<name>pattern)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Keith_NZ
Explorer
3 weeks ago
Thanks Sainag,
Just confusing doco then as this page: https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample
which is all about SPL2
in section 2 has examples without the P after the ?
but section 3 has the P
all good, thanks
