Regular Expressions 101

ID extraction failure splunk

Open Workspace
  • PCRE (Legacy)
  • Match
0

Regular Expression

/
\\(?<PatientId>[^\\]+)\\\w+\.(?:\d+\.)+dcm
/

Description

Extraction of ID fails in Splunk search window, as an illustration to case 2124568 (https://splunkcommunities.force.com/customers/5005a00001j1gHcAAI )

Submitted by Jonathan Martens <jonathan.martens@maastro.nl>