Regex - Multi

Comments

1 comment

  • Avatar
    Rick Jury

    try this:

    | parse regex field=some_field "type\\{3}\":\\{3}\"(?<type>[^\\]+)\\{3}\",\\{3}\"code\\{3}\":\\{3}\"(?<code>[^\\]+)\\{3}\",\\{3}\"description\\{3}\":\\{3}\"(?<description>[^\\]+)" multi nodrop

    this would work if you had a 'less escaped' version !
    | parse regex field=some_field "type\\{1}\":\\{1}\"(?<type>[^\\]+)\\{1}\",\\{1}\"code\\{1}\":\\{1}\"(?<code>[^\\]+)\\{1}\",\\{1}\"description\\{1}\":\\{1}\"(?<description>[^\\]+)" multi nodrop

    0
    Comment actions Permalink

Please sign in to leave a comment.