LogScale's regular expression functionality is built on the JitRex engine and shares similar syntax with common regex implementations like Perl, JavaScript, and re2, though some operations are adapted specifically for CrowdStrike Query Language (CQL). The documentation covers supported regex patterns, query functions, and provides detailed comparisons between LogScale's regex implementation and other popular environments including JavaScript, PCRE, and re2.

The regular expression parser within LogScale is based on the JitRex regular expression engine which was part of the Jint programming language (see Jint Programming Language).

The engine works with very similar syntax to other regular expression engines such as those included with scripting languages like Perl, JavaScript or Google's re2 engine.

Due to the nature of querying within the CrowdStrike Query Language (CQL), certain regular expression operations have to be performed in a slightly different way (for example, named groups), but otherwise the syntax will be familiar to users of most regular expression environments.

For more information on the regular expression support within LogScale: