I want to match the line 1 and line 5 pattern kind of URI in my search
/services/contracts/D7C3D8AD7B616D7ABA7B
/services/contracts/?owner_id=36E6057857FB41820A494109
/services/contracts/FMOTSNQ2ETDLYLCWYVLB/purchased
/services/contracts/FMOTSNQ2ETDLYLCWYVLB/config
/services/contracts/D7C3D8AD7B616D7ABA7B
Regular expression I am using
\/services\/contracts\/[a-zA-z0-9]{20}$
I have tested the above data with regex I have created in below sites
where people suggested here to check your regular expression
http://www.regexpal.com/ and
http://regexr.com/
It is returning me the expected results
When I apply the same in Splunk, it is not working. Any suggestions would be appreciated
| regex_raw="\/services\/contracts\/[a-zA-z0-9]{20}$"
↧