Splunk Search

Ingest processor rex problem

Keith_NZ
Explorer

Hi,

I am new to Ingest Processor and have had some success but am having an issue with the rex command so I have created a very simple example copied from the manual here https://docs.splunk.com/Documentation/SCS/current/SearchReference/RexCommandExamples#2._Regular_expr...

But I am getting this error:

Keith_NZ_1-1741132027512.png

Any ideas why?

Thanks

 

 

 

Labels (1)
0 Karma
1 Solution

sainag_splunk
Splunk Employee
Splunk Employee

 

  1. Traditional SPL: (?<name>pattern)
  2. SPL2 (Edge/Ingest Processor): (?P<name>pattern)

 

If this helps, Upvote!!!!
Together we make the Splunk Community stronger 

View solution in original post

sainag_splunk
Splunk Employee
Splunk Employee

 

  1. Traditional SPL: (?<name>pattern)
  2. SPL2 (Edge/Ingest Processor): (?P<name>pattern)

 

If this helps, Upvote!!!!
Together we make the Splunk Community stronger 

Keith_NZ
Explorer

Thanks Sainag,

Just confusing doco then as this page: https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample

which is all about SPL2 

in section 2 has examples without the P after the ? 

but section 3 has the P

all good, thanks

0 Karma
Get Updates on the Splunk Community!

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...