Using regex to extract fields

I don't have a specific solution for you, but a troubleshooting step I would try if you haven't already would be to see if you can output the full field without the regex.I've had too many situations in the past where the issue that was blocking me from moving forward was being introduced earlier than I thought it was.

there are some fields that can be extracted from a parser funtion, but the message field is just broken bad. I think this is due to the structure of the raw event.. but still dont see why the regex extract is not a allowing the field

Example/Screen shot would be helpful here <@U038140BJBG&gt; (if possible). Or can you paste an example event here, and tell me more about what you are trying to extract? Happy to help!

hey Joe, Darrel it seems like the structure of the events was not consistent, thus the regex will not match properly some of the eventsI made a broader regex and now that it matches all the events the issue seems resolved..