Hi I have a problem with the error message of the Splunk: Error in 'rex' command: regex="(?ms)\]+[^\s](?P.*?)\" has exceeded configured match_limit, consider raising the value in limits.conf
The problem is, that the regex `regex="(?ms)\]+[^\s](?P.*?)\ "`for + xml file generates 8099 steps.
I tested it on this xml file:
Can you help me, please, to optimize the regex? I want to extract the test tag.
↧