Hi I am trying to parse a regEx but I am getting error

Follow

Akshay Jaisinghani

• June 10, 2021 18:49

 

I am trying to "parse regex" and I followed the documentation provide by you but I am getting an error.

regex expression:

| parse regex "(?<field>["]?level[\\]?["]?[:=][\\]?["]?(([a-zA-Z]*))[\\]?["]?)"

error I am getting is:

No capture group found in regex, regex="(?<level?level[\\]?[". An example of a valid "extract" usage is [extract "From: (?<from>.*) To: (?<to>.*)"]

May I get some help. Thanks in advance

0

• 

  Harishwer Selvakumar

  • June 10, 2021 19:18

  Hello Akshay Jaisinghani,

  The Special characters in the RegEx needs to be escaped.
  For this particular case, the double quotes (") seems to end the RegEx expression Statement.

  Thank you

  Regards
  Harishwer Selvakumar
  Customer Success Engineer - Sumo Logic

  0

  Comment actions Permalink
• 

  Akshay Jaisinghani

  • June 11, 2021 04:59

  Hi Harishwer Selvakumar

  Thanks for the immediate response , I tried the regex by escaping it but then I got this response. I tried it couple of times the issue was same.

  0

  Comment actions Permalink
• 

  Akshay Jaisinghani

  • June 11, 2021 12:40

  Hi Harishwer Selvakumar,

  I tried this:

  _sourceCategory=kubernetes*
  | parse regex "(?<loglevel>level[\\]?[\\\"]?[:=][\\]?[\"]?(([a-zA-Z]*)))" multi

  its working in my case.

  0

  Comment actions Permalink

Please sign in to leave a comment.