Regular Expressions 101

Community Patterns

New splunk field ex

0

Regular Expression
PCRE (PHP <7.3)

/
(?s)(?:threadId:)(?<threadId4>.*?)(?:\s*\|)(?:.*userId:)(?<userId4>.*?)(?:\s*\|)(?:.*applicationName:)(?<appName>.*?)(?:\s*\|)(?:.*payload:)(?<payload>.*?)(?:\s*\|)
/
gm

Description

no description available

Submitted by anonymous - 6 years ago