At the least, your regular expression has an error
You have:
"/\"user_search\"=>{\"name\"=>/(?<result>.*)"
There is an extra "/" after the "=>"
This seems to pull what you’re looking for:
user_search\"=>{\"name\"=>(?<result>.*)
from User warren – Stack Overflow https://stackoverflow.com/questions/69294371/extract-data-from-splunk/69304276#69304276
via IFTTT