Hello!
I'm parsing strings using `rex` and I'd like to define a set of field names that contain the period (.) character. As an example, I'd like to create three fields: `AI1.1.1` `AI1.1.2` and `AI1.1.3`. When using the `rex` command, however, I have only managed to create the fieldnames without the period character. Here is some run anywhere code:
| makeresults
| eval string = "2,4,2"
| rex field=string "(?[\d]*),(?\d]*),(?[\d]*)"
If I replace the `rex` command with this one:
| rex field=string "(?[\d]*),(?\d]*),(?[\d]*)"
Then it no longer works. I tried escaping, the period, but I cannot get it working.
Is it possible to do what I'm looking to do?
Thank you and best regards,
Andrew
↧