Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Regex search not working

$
0
0
So I have a couple of lines that I am trying to get info out of using regex and it's not going quite the way I was hoping. Say in my events I have the lines below 1.) `\Device\HarddiskVolume23\Test1` 2.) `\Device\HarddiskVolume23\Test1\Test` 3.) `\Device\HarddiskVolume23\Test1\Test\Test1` What I am looking to get is the results that would just be the root directories ( `\Device\HarddiskVolume23\Test1` ). So I'm trying to set up a regex that does just that, but I'm not having the best of luck. If I do the following, I will get the results 1 and 3 above. regex Object_Name="Test1$" I was trying to set up the search so it would go: regex Object_Name="HarddiskVolume\d\\d\\Test1$" That doesn't return any results. Even if I used: regex Object_Name="HarddiskVolume23\\Test1$" I do not get any results. I have multiple different paths to get this to search for, so that is why I would like to use as many regex variables as I can. So what can I do to get this to work properly?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>