replace eval function uses java regex syntax instead of pcre2

[kortemik]

Describe the bug
replace eval function uses java regex syntax instead of pcre2

following can be used in pcre2 syntax to match for literal characters ] and [ at the beginning of the line

(^[][])

however for java syntax it is incorrect and requires escaping as follows

(^[\]\[])

Expected behavior
pcre2 syntax is supported for replace eval function while java is supported with a to-be-implemented replace4j function.

How to reproduce

use pcre2 syntax in following query is not working:

|makeresults count=1 | eval value="[" | eval value = replace(value, "(^[][])", "X")

gives

Unclosed character class near index 6
(^[][])
      ^

Screenshots

Software version
pth_07 7.2.4

Desktop (please complete the following information if relevant):

• OS:
• Browser:
• Version:

Additional context

use of java syntax:

|makeresults count=1 | eval value="[" | eval value = replace(value, "(^[\]\[])", "X")

replaces correctly

Teragrep

_time	value
2024-10-22T16:13:41.000+03:00	X

[Abigael-JT]

Substitute support to be added to JavaPcre library #33