Could you please share sample logs & search, you are using. ... View more

I have installed the new version I am having the same issue in 5 of my default transforms Bad regex value: [Regex] , of param: transforms.conf / [stanza below] / REGEX; why: two named subpatterns have the same name [extract_event_his-performancev5] [extract_ipsv5] [extract_trafficv5] [extract_virusv5] [extract_webfilterv5] ... View more

Hi Conner40744, Could you please check that the data source is the one that has been defined in your files? If it's OK, please make sure that new props and transforms are applied. You can restart Splunk to be sure. Thanks, Open3S, ... View more