Match a String Against Regex in Pipeline Processors

jochen · August 21, 2017, 2:24pm

You can access the boolean matches property of the result:

Graylog2/graylog-plugin-pipeline-processor/blob/2.3.0/plugin/src/test/resources/org/graylog/plugins/pipelineprocessor/functions/regexMatch.txt#L3


rule "regexMatch"
when
regex("^.*(cde\\.)(:(\\d+))?.*$", "abcde.fg").matches == true &&
regex(".*(cde\\.)(:(\\d+))?.*", "abcde.fg").matches == true &&
regex("(cde\\.)(:(\\d+))?", "abcde.fg").matches == true &&
regex("^(cde\\.)(:(\\d+))?$", "abcde.fg").matches == false
then
let result = regex("(cd\\.e)", "abcd.efg");
set_field("group_1", result["0"]);
let result = regex("(cd\\.e)", "abcd.efg", ["name"]);
set_field("named_group", result["name"]);
set_field("matched_regex", result.matches);
end

Topic		Replies	Views
Matching Field Contents with Regex (Pipeline Processing) Graylog Central (peer support)	7	6779	October 26, 2017
Graylog Remove Field That Matches Regular Expression Graylog Central (peer support)	6	1212	August 27, 2019
Regexing error only in pipelines Graylog Central (peer support)	2	560	December 13, 2018
Wildcard Searching within Pipeline Rule Graylog Central (peer support) pipeline-rules	6	1274	March 11, 2019
Regex in rule doesnot work as expected Graylog Central (peer support) pipeline-rules	8	1425	November 8, 2017

Match a String Against Regex in Pipeline Processors

Related topics