- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Keith_NZ
Explorer
03-04-2025
03:49 PM
Hi,
I am new to Ingest Processor and have had some success but am having an issue with the rex command so I have created a very simple example copied from the manual here https://docs.splunk.com/Documentation/SCS/current/SearchReference/RexCommandExamples#2._Regular_expr...
But I am getting this error:
Any ideas why?
Thanks
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
sainag_splunk

Splunk Employee
03-05-2025
04:08 PM
- Traditional SPL: (?<name>pattern)
- SPL2 (Edge/Ingest Processor): (?P<name>pattern)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
sainag_splunk

Splunk Employee
03-05-2025
04:08 PM
- Traditional SPL: (?<name>pattern)
- SPL2 (Edge/Ingest Processor): (?P<name>pattern)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Keith_NZ
Explorer
03-05-2025
07:03 PM
Thanks Sainag,
Just confusing doco then as this page: https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample
which is all about SPL2
in section 2 has examples without the P after the ?
but section 3 has the P
all good, thanks
