https://community.splunk.com/t5/Deployment-Architecture/Deployment-Server-Whitelist-help/m-p/308045#M19086 <P>This should work </P> <P>hostname([0-9]{2}|100).corp </P> <P>You can verify it at regex101.com</P> Fri, 14 Jul 2017 23:18:19 GMT splunkIT 2017-07-14T23:18:19Z https://community.splunk.com/t5/Deployment-Architecture/Deployment-Server-Whitelist-help/m-p/308044#M19085 <P>I have n number of hosts with below pattern. </P> <P>hostname01.corp.domain.com <BR /> hostname02.corp.domain.com <BR /> hostname03.corp.domain.com <BR /> ...<BR /> hostname100.corp.domain.com<BR /> hostname101.corp.domain.com <BR /> hostname102.corp.domain.com </P> <P>What regex to use to whitelist for above hosts so that only hostname01.corp.domain.com to hostname100.corp.domain.com are included, but excluding hostname101.corp.domain.com and others?</P> Fri, 14 Jul 2017 23:15:19 GMT https://community.splunk.com/t5/Deployment-Architecture/Deployment-Server-Whitelist-help/m-p/308044#M19085 splunkIT 2017-07-14T23:15:19Z https://community.splunk.com/t5/Deployment-Architecture/Deployment-Server-Whitelist-help/m-p/308045#M19086 <P>This should work </P> <P>hostname([0-9]{2}|100).corp </P> <P>You can verify it at regex101.com</P> Fri, 14 Jul 2017 23:18:19 GMT https://community.splunk.com/t5/Deployment-Architecture/Deployment-Server-Whitelist-help/m-p/308045#M19086 splunkIT 2017-07-14T23:18:19Z https://community.splunk.com/t5/Deployment-Architecture/Deployment-Server-Whitelist-help/m-p/308046#M19087 <P>I prefer to keep the <CODE>whitelist</CODE> in <CODE>serverclass.conf</CODE> explicit - helps in forwarder's administration .... </P> Sat, 15 Jul 2017 00:11:38 GMT https://community.splunk.com/t5/Deployment-Architecture/Deployment-Server-Whitelist-help/m-p/308046#M19087 ddrillic 2017-07-15T00:11:38Z