is there a way to have case sensitive matches for transforms.conf?
I have a regex setting the sourcetype and index but i require matching some words with case insensitivity. is there a way to match insensitive as you would for a normal regex (i)
REGEX=:\d+\s([O|o|S|s|G|g][HOST|host].*[ABC|abc])[\w\d]+\s[
i would rather use a case insensitive regex if possible.
You put(?i)
in your regex at the point you want it to be case-insensitive:
REGEX=(?i):d+s([osg][host].*[abc])[wd]+s[
or:
REGEX=:d+s(?i)([osg][host].*[abc])(?-i)[wd]+s[
or:
REGEX=:d+s(?i:([osg][host].*[abc]))[wd]+s[
You put(?i)
in your regex at the point you want it to be case-insensitive:
REGEX=(?i):d+s([osg][host].*[abc])[wd]+s[
or:
REGEX=:d+s(?i)([osg][host].*[abc])(?-i)[wd]+s[
or:
REGEX=:d+s(?i:([osg][host].*[abc]))[wd]+s[
works like a charm, thanks