Splunk Search

What syntax or format of regex does Splunk support?

Simeon
Splunk Employee
Splunk Employee

I have created regular expressions (regex) to extract fields and want to know what syntax style Splunk supports.

Tags (3)
1 Solution

Simeon
Splunk Employee
Splunk Employee

Splunk uses the Perl Compatible Regular Expression (PCRE) library. Therefore, you should utilize the perl syntax for creating regular expressions (regex).

View solution in original post

Simeon
Splunk Employee
Splunk Employee

Splunk uses the Perl Compatible Regular Expression (PCRE) library. Therefore, you should utilize the perl syntax for creating regular expressions (regex).

gkanapathy
Splunk Employee
Splunk Employee

References on PCRE are here: http://www.pcre.org/

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...