Splunk Search

Is there any regular expression character limit on Splunk?

deodion
Path Finder

Is there any regex limit on Splunk?
Where can I configure its limit?

I have very specific regex formula and it contains long characters..
The formula pattern looks like this: (A1.*A2)|(B1.*B2)|(C1.*C2)|... and so on....

My question is simple, I hope its clear enough...

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@deodion - Did the answer provided by cusello help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi deodion,
there aren't limits to regex lenght, the only limit I encountered is the lenght of an URL displayed by a browser: it depends by browser but it should be around 2048,.
Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...