Matching IPv4 subnet octets
As noted previously, multiple escapes for [ and ] in regular expressions are required because they are reserved characters in both the Striim TQL compiler and Java.
match(s.srcIp,'(^\\\\d{1,3}\\\\.)') - first octet
match(s.srcIp,'(^\\\\d{1,3}\\\\.\\\\d{1,3})\\\\.'), - first and second octet
match(s.srcIp,'(^\\\\d{1,3}\\\\.\\\\d{1,3}\\\\.\\\\d{1,3}\\\\.)') - first, second, and third octet