Event Pattern: matches (MdrElementID, '\S{3}\d{3}AL')
When using the regex in the Event GUI to search for events, I get the events returned as expected. When I then build an Enrichment policy based on the event search and want to deploy it to the APM connector, I get an error: UNKNOWN_ERROR - [QueryParms.ConvertToEIPolicy; Validating Policy failed, see log files].
I found the following error in the logs:
ERROR [http-bio-0.0.0.0-7090-exec-99209] builder.PatternBuilder.getFieldValue(1394) - [Error: illegal escape sequence: S]
[Near : {... "(?s).*\S{3}\d{3}AL.*" ....}]
Why would there be a problem with the '\' when trying to deploy the policy?
I will see if I can test this same regex on another Connector and see if I hit the same issue.