Activity Feed
- Posted rex operation -- Regex: syntax error in subpattern name (missing terminator) on Splunk Search. 10-28-2021 12:08 PM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 |
10-28-2021
12:08 PM
Hi, I'm continuously receiving the error Regex: syntax error in subpattern name (missing terminator) when attempting to search with a 'rex' operation. I've gone through several different message boards and nothing seems to resolve the issue. Any help would be greatly appreciated! My intention is to grab the "Http-Method" value from the raw event. Search: [Search...] | rex field=_raw "Method: (?<Http-Method>.*)" Sample Event: 2021-10-28 10:55:39,505 1109468116 [http-bio-8443-exec-9] INFO o.a.c.i.LoggingInInterceptor - Inbound Message ---------------------------- ID: 41087 Address: [...Sensitive Information Removed...] Encoding: ISO-8859-1 Http-Method: POST Content-Type: application-xml Headers: [...Sensitive Information Removed...]
... View more
Labels
- Labels:
-
rex