Is there a more elegant way to do this? New to using rex & I can’t seem to strip out the multiple parentheses and slashes from a field without using replace. (I don't have control over t...
The following search is complaining about an unmatched parenthesis. Since the parentheses are inside of quotes, shouldn't the parser not care? Does anyone have a workaround?
{baseSearch}
| eval B...
...\(/g"
This gives me the following error, since apparently the backslash isnt enough to escape the parentheses:
Error in 'rex' command: Regex: missing closing parenthesis
Can anyone help me o...
The regular expression is correct according to RegExr, but i keep on getting this error
Regex: unmatched parentheses
I am not understanding why my regular expression is not working. Here i...
Hi All,
I want to extract from my Routing_Location field the Integer in-between the parentheses and then use it for a Drilldown link
I'll give ab example:
Routing_Location
USA,V...
How do parentheses, OR, and NOT work in search language? If I do something like...
( source=foo "somesearchterm" ) OR ( source=bar NOT "othersearchterm" NOT "anothersearchterm" )
I get a lot m...
...ccounting for the open parentheses.
Given this example, I am wanting to extract only the follow snippet in BOLD:
20160825 12:51:16 unhandled error from dispatcher, sender:System.Windows...
...ailed"|rex "(?i)^[^\\]*\\(?P<userid>[^']+)"
"Authentication failed"|rex "user\s'\S+\\(?<userid>\w*)'"
but both of them give "Regex: unmatched parentheses" message.
What am I...
...rite regex to convert this into "ussp-usrv-rt01.domain.com"
My strategy was to capture everything after NOERROR]\s+\w+\s+ to end of line, then replace the parenthesis with a period. Having trouble g...
...arse the search: unbalanced parentheses."
When I go through the logs I was surprised to see that such a simple search resulted in
litsearch (index="med" index=nessus ((source="SI - EZproxy" o...