Regex Expression: ignore all characters and match only the last word in the message field

Elastic Stack Elasticsearch
1

Hello, I've created a query in wich I want to use a regex expression.

GET tpms-system/_search
{
    "aggs": {
        "dashbord_updates": {
            "terms": {
              "field" : "message",
              "include": "<some regex exp>"
            }
        }
    }
}

I want to ignore all characters and match only the last word in the message field. I've achieved that with this expression: ((\b\w+)[\.?!\s\"]*$). But it doesn't work with Elasticsearch. How I can modify this regex in order to work. Any ideas?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.