Match a String Against Regex in Pipeline Processors

jochen · August 21, 2017, 2:24pm

You can access the boolean matches property of the result:

Graylog2/graylog-plugin-pipeline-processor/blob/2.3.0/plugin/src/test/resources/org/graylog/plugins/pipelineprocessor/functions/regexMatch.txt#L3


rule "regexMatch"
when
regex("^.*(cde\\.)(:(\\d+))?.*$", "abcde.fg").matches == true &&
regex(".*(cde\\.)(:(\\d+))?.*", "abcde.fg").matches == true &&
regex("(cde\\.)(:(\\d+))?", "abcde.fg").matches == true &&
regex("^(cde\\.)(:(\\d+))?$", "abcde.fg").matches == false
then
let result = regex("(cd\\.e)", "abcd.efg");
set_field("group_1", result["0"]);
let result = regex("(cd\\.e)", "abcd.efg", ["name"]);
set_field("named_group", result["name"]);
set_field("matched_regex", result.matches);
end

Topic		Replies	Views
Matching Field Contents with Regex (Pipeline Processing) Graylog Central (peer support)	6	6927	October 12, 2017
Graylog Remove Field That Matches Regular Expression Graylog Central (peer support)	5	1281	August 13, 2019
Pipeline regex rule Graylog Central (peer support) pipeline-rules	7	1668	April 9, 2023
Doubt about Regex on Pipeline Graylog Central (peer support)	1	273	January 4, 2023
How use Regex in Graylog Graylog Central (peer support)	4	10271	July 27, 2023

Match a String Against Regex in Pipeline Processors

Related topics