Splunk Search

Ingest processor rex problem

Keith_NZ
Explorer

Hi,

I am new to Ingest Processor and have had some success but am having an issue with the rex command so I have created a very simple example copied from the manual here https://docs.splunk.com/Documentation/SCS/current/SearchReference/RexCommandExamples#2._Regular_expr...

But I am getting this error:

Keith_NZ_1-1741132027512.png

Any ideas why?

Thanks

 

 

 

Labels (1)
0 Karma
1 Solution

sainag_splunk
Splunk Employee
Splunk Employee

 

  1. Traditional SPL: (?<name>pattern)
  2. SPL2 (Edge/Ingest Processor): (?P<name>pattern)

 

If this helps, Upvote!!!!
Together we make the Splunk Community stronger 

View solution in original post

sainag_splunk
Splunk Employee
Splunk Employee

 

  1. Traditional SPL: (?<name>pattern)
  2. SPL2 (Edge/Ingest Processor): (?P<name>pattern)

 

If this helps, Upvote!!!!
Together we make the Splunk Community stronger 

Keith_NZ
Explorer

Thanks Sainag,

Just confusing doco then as this page: https://docs.splunk.com/Documentation/SCS/current/SearchReference/rexcommandexample

which is all about SPL2 

in section 2 has examples without the P after the ? 

but section 3 has the P

all good, thanks

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk &#43; Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...