I upgraded to Splunk 6.3.3 and am running TA-cisco_ios 2.3.2 and when I restart Splunk I am getting the following errors:
Bad regex value: '%SYS-.+-CONFIG_I(\s)?: Configured from (?(?!memory).+) by (?(?!snmp)\S+)(\s\on)?\s?(?\w+)?(\s((?\S+)?))?', of param: props.conf / [cisco:ios] / EXTRACT-cisco_ios-config_change; why: missing opening brace after \o
Bad regex value: 'ERR_DISABLE(\s)?:\s(? .+)\serror\sdetected\s\on\s(? .+),\sputting\s(? (? \D+)(? (\d+)(\S)*))\sin\s', of param: props.conf / [cisco:ios] / EXTRACT-cisco_ios-pm_err_disable; why: missing opening brace after \o
Any ideas on what needs to be fixed?
... View more