I need to search for fields that contain exactly 6 digits.
For example, it should return fields that contain "123456".
I'm currently trying regex_raw="\d{6}" but I think I'm missing something or doing something wrong. Any help would be appreciated!
Something like this might work
(?<!\d)\d{6}(?!\d)
Try this
<your search query> | rex field=_raw "(?<six>\d{6})" | search six=*
let me know if this helps!
regex "\d{6}"
should work. What results are you getting? Can you share the full query in case the problem lies elsewhere?