regular expression to find special character

[logloganathan]

I want to use regular expression which should get special charcter in Splunk
Please help in this

[niketn · Accepted solution]

@logloganathan, based on the sample Data provided can you try the following:

 <yourBaseSearch>
 | rex field=_raw "(?<special_character>[^\w|\s]+)"

Following is the link to regex to test with your sample data: https://regex101.com/r/9K4Ugs/1

[logloganathan]

thanks for your answer..Could you please post the same in answer box

[niketn]

@logloganathan, I have converted my comment to answer. Please accept to mark this question as answered 🙂

[niketn]

@logloganathan, please add a sample event and provide the details of which field you want to extract. As you might already know that regular expressions are very much pattern based and without sample/mocked up data it would be tough to assist. You should anonymize (so that pattern for regular expression remains the same) any sensitive data before posting the same.

You can always use tools like regex101.com to add sample data and test your own regular expressions.

[logloganathan]

sargünan ramesh where u is not normal
i want to get the word sargünan when it finds letter ü
similarly Tamil şangam where S is not normal but i want the word şangam to be displayed in output

[logloganathan]

any update?

[logloganathan]

Sure let me give the sample..

[493669]

use backslashes \ before special character in regex.