regular expression, take first three lines or all lines less than 3 lines in splunk

Question

In java, how to write a regex to take first 3 lines if there is more than 3 lines OR take all lines if there is less than or equal to 3 lines?

I used the https://regexr.com/ to verify my own solution, failed. Then I asked the online chat group IRC #regex, the expert gives me answer within 1 minute. So I believe I shall share the knowledge here.

How about `^(?:.*\r?\n){1,3}` ([demo](https://regex101.com/r/6sEGqm/2/))? It's plain-vanilla regex so I would think it would work in spunk. — Cary Swoveland, Mar 24 '20 at 06:45

score 0 · Accepted Answer · answered Mar 24 '20 at 03:19

0

[^\n]*\n?[^\n]*\n?[^\n]*\n?

One could verify it at website: https://regexr.com/

answered Mar 24 '20 at 03:19

user84592

4,750
11
55
91

regular expression, take first three lines or all lines less than 3 lines in splunk

1 Answers1