# Can not create script field by using regex in kibana

**URL:** <https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967>\
**Category:** Kibana\
**Created:** [September 17, 2020, 11:14am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967 "2020-09-17T11:14:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![le\_ba\_nam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/le_ba_nam/32/75148_2.png) [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\
**Post date:** [September 17, 2020, 11:14am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967/1 "2020-09-17T11:14:37Z")

</div>

I want to create new script field in Kibana. I want to using regex to cut some text from another field ('message') and fill to new script field. I follow instruction link below:

> **[Using Painless in Kibana scripted fields](https://www.elastic.co/blog/using-painless-kibana-scripted-fields)**
>
> This blog presents common use cases for Kibana scripted fields, and walks user through how to create scripted fields in a newly set-up Elastic Cloud instance.

  
( Match a string and return that match section in this link)

My code here:

```auto
def m = /^.*\.([a-z]+)$/.matcher(doc['message'].value);
if ( m.matches() ) {
   return m.group(1)
} else {
   return "no match"
}

```

But it didn't work.  
`Script is invalid. View script preview for details`  
and kibana mark 'matcher' as a error (red line under that text).

Can you give me some idea or solution? Thanks.

---

<div class="post-metadata">

**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\
**Post date:** [September 17, 2020, 11:23am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967/2 "2020-09-17T11:23:13Z")

</div>

hi

One reason could be that RegExp are disabled in Elasticsearch by default.

Did you set `script.painless.regex.enabled: true` in `elasticsearch.yml`

> **[Painless Examples | Painless Scripting Language \[6.8\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/painless/6.8/painless-examples.html#modules-scripting-painless-regex)**

Best,  
Matthias

---

<div class="post-metadata">

**Author:** ![le\_ba\_nam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/le_ba_nam/32/75148_2.png) [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\
**Post date:** [September 18, 2020, 12:53am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967/3 "2020-09-18T00:53:53Z")

</div>

Thank matw very much 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 16, 2020, 12:53am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967/4 "2020-10-16T00:53:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.