Splunk Search

Is there any regular expression character limit on Splunk?

deodion
Path Finder

Is there any regex limit on Splunk?
Where can I configure its limit?

I have very specific regex formula and it contains long characters..
The formula pattern looks like this: (A1.*A2)|(B1.*B2)|(C1.*C2)|... and so on....

My question is simple, I hope its clear enough...

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@deodion - Did the answer provided by cusello help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi deodion,
there aren't limits to regex lenght, the only limit I encountered is the lenght of an URL displayed by a browser: it depends by browser but it should be around 2048,.
Bye.
Giuseppe

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...