Regular Expression Syntax
The regular expression parser within LogScale is based on the JitRex regular expression engine which was part of the Jint programming language (see Jint Programming Language).
The engine works with very similar syntax to other regular expression engines such as those included with scripting languages like Perl, JavaScript or Google's re2 engine.
Due to the nature of querying within the CrowdStrike Query Language (CQL), certain regular expression operations have to be performed in a slightly different way (for example, named groups), but otherwise the syntax will be familiar to users of most regular expression environments.
For more information on the regular expression support within LogScale:
For information on the supported regular expression syntax, see Regular Expression Syntax Patterns.
For a list of related regular expression functions, see Regular Expression Query Functions.
For a comparison between the LogScale regex syntax and other environments, see: