Regex changed between Vancouver and Washington

[yzyrlr1]

Hi anyone, did something change from Vancouver to Washington, because when we upgraded my Regex code stop working because in Event Management transform and Compose Alert Output, stop recognizing double quote as ", and start translating/displaying it to putting in the encoding code of &#34.  Can you please tell me how to get around this. I needed the ASAP! Please see attached images.  This happen recently when we update to Washington, prior to this update things were work excellent. help!. 

[Allen Andreas]

Hello,

I'm unsure about any changes, but you would need to escape the double-quotes and can do so by leading it with \ in your regex. Example: Tell them \"Hello!\" for me.

[yzyrlr1]

Hi Allen, thanks for replying to me but I think you have it wrong.  My  Regex code was working at 1st  in  Vancouver here my Rege3x code "(.*?)".*Root Cause: "(.*?)".*Created by Alert: "(.*?)".*  

I did not have to escape the double quote.  I formatted my data from SolarWinds to use the double quote as my delimiter so I could capture my 3 data groups in the text string.  Here an example of the data before we upgrade to Washington. 

"Windows Server Administration" is Critical as of Thursday, August 15, 2024 9:23 AM, Root Cause: "C:\\ Label: EC557FF9 on STLMOCA31 is Critical." - Alert! - Created by Alert: "SAM-GROUP-AVAILABILITY-CRITICAL-05" - AlertID: 397

Now after we upgrade Washington my Regex code doesn't work because the Rex editor got changed  and now when I look at my data the editor shows the double quote now as this " in the   transform and Compose Alert Output. So my data looks like below now.

"Windows Server Administration" is Critical as of Thursday, August 15, 2024 9:23 AM, Root Cause: "C:\\ Label: EC557FF9 on STLMOCA31 is Critical." - Alert! - Created by Alert: "SAM-GROUP-AVAILABILITY-CRITICAL-05" - AlertID: 397 

My ServiceNow Admin opened a case with ServiceNow support  CS7496122, they reply saying this is how it works, and that just not true. Can you please help me, I can get around the encoding of the double quote.. 

Help!!!!

[yzyrlr1]

If you like I can show you with a zoom meeting so you can see this live my email is  rushr@magellanhealth.com.  Please let me know if you like to do this to see live data on this.  I see double quotes in event records, but the Regex editor transform and Compose Alert Output it sees it as "

please help me I need to get this process back working.  thanks again...