The following search is complaining about an unmatched parenthesis. Since the parentheses are inside of quotes, shouldn't the parser not care? Does anyone have a workaround?
{baseSearch}
| eval B...
Is there a more elegant way to do this? New to using rex & I can’t seem to strip out the multiple parentheses and slashes from a field without using replace. (I don't have control over t...
...\(/g"
This gives me the following error, since apparently the backslash isnt enough to escape the parentheses:
Error in 'rex' command: Regex: missing closing parenthesis
Can anyone help me o...
The regular expression is correct according to RegExr, but i keep on getting this error
Regex: unmatched parentheses
I am not understanding why my regular expression is not working. Here i...
Hi All,
I want to extract from my Routing_Location field the Integer in-between the parentheses and then use it for a Drilldown link
I'll give ab example:
Routing_Location
USA,V...
How do parentheses, OR, and NOT work in search language? If I do something like...
( source=foo "somesearchterm" ) OR ( source=bar NOT "othersearchterm" NOT "anothersearchterm" )
I get a lot m...
...ccounting for the open parentheses.
Given this example, I am wanting to extract only the follow snippet in BOLD:
20160825 12:51:16 unhandled error from dispatcher, sender:System.Windows...
...ailed"|rex "(?i)^[^\\]*\\(?P<userid>[^']+)"
"Authentication failed"|rex "user\s'\S+\\(?<userid>\w*)'"
but both of them give "Regex: unmatched parentheses" message.
What am I...
...rite regex to convert this into "ussp-usrv-rt01.domain.com"
My strategy was to capture everything after NOERROR]\s+\w+\s+ to end of line, then replace the parenthesis with a period. Having trouble g...
...arse the search: unbalanced parentheses."
When I go through the logs I was surprised to see that such a simple search resulted in
litsearch (index="med" index=nessus ((source="SI - EZproxy" o...