I am trying to regex out eligible with the answer field true, when i do it in the regex builder this works eligible\\":(?<eligibility_status>[^,]+) but when i do it in Splunk with adding the additional backslash to escape the quotation the query runs but the field is not there.   Name":null,"Id":null,"WaypointId":null}},"Body":{"APIServiceCall":{"ResponseStatusCode":"200","ResponsePayload":"{\"eligibilityIndicator\":[{\"service\":\"Mobile\",\"eligible\":true,\"successReasonCodes\":[],\"failureReasonCodes\":[]}]}"}}} ... View more

I'm trying to regex the field that has "REPLY" CommonEndpointLoggingAspect {requestId=94f2a697-3c0d-4835-b96a-42be3d2426e2, serviceName=getCart} - REPLY  ... View more