×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
harikishore23
New Member
Member since: ‎11-27-2018
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎11-27-2018
View All

Re: How do I match all data after the last slash u...

by in Splunk Search
‎11-27-2018 04:56 AM
‎11-27-2018 04:56 AM
Hi, I'm getting the following error when using using this search pattern with your code. | rex field=URL "^(?.*[\\/])" Encountered the following error while compiling the regex '^(?.*[\/])': Regex: unrecognized character after (? or (?- Thanks. ... View more

How do I match all data after the last slash using...

by in Splunk Search
‎11-27-2018 12:59 AM
‎11-27-2018 12:59 AM
Hi, I'm trying to retrieve data using regex and wildcard. Search query - "URL=/data/item/v1/*/" Result 1 - /data/item/v1/1234/on Result 2 - /data/item/v1/1234 I want to all data between the asterix, but not after the last slash. I'm using this regex currently, but it doesn't work. Got the following error - Error in 'rex' command: The regex '^(.*[\\/])' does not extract anything. It should specify at least one named group. Format: (?...). rex field=URL "^(.*[\\\/])" Regex works fine here - regexr . com / 43r9n ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM