Regular Expression Query Functions
LogScale's regex related functions make use of the LogScale regular expression engine. See Regular Expression-based Field Extraction for more information on writing regular expressions.
Table: Regular Expression Query Functions
| Function | Default Argument | Availability | Description |
|---|---|---|---|
array:regex(array, [flags], regex) | array | introduced in 1.62.0 | Checks whether the given pattern matches any of the values of the array and excludes the event from the search result. |
regex([field], [flags], [limit], regex, [repeat], [strict]) | regex | Extracts new fields using a regular expression. | |
replace([as], [field], [flags], regex, [replacement], [with]) | regex | Replaces each substring that matches given regular expression with given replacement. | |
splitString([as], by, [field], [index]) | field | Splits a string by specifying a regular expression by which to split. |