https://community.splunk.com/t5/Splunk-Search/WinEventLog-input-xmlRegex-modifier-When-did-THIS-become/m-p/527117#M148786 <P>I don't know when it first became available, but xmlRegex has been around since 7.0.</P> Thu, 29 Oct 2020 15:31:28 GMT richgalloway 2020-10-29T15:31:28Z https://community.splunk.com/t5/Splunk-Search/WinEventLog-input-xmlRegex-modifier-When-did-THIS-become/m-p/527110#M148783 <P>I've been on the struggle bus with WinEventLog blacklist entries this week and stumbled upon the new xmlRegex modifier.&nbsp; &nbsp; Anyone know which version of the Splunk Universal forwarder introduced this capability?</P><P>Note:&nbsp; The Splunk docs surrounding advanced white/blacklisting of WinEventLog inputs have improved significantly!</P> Thu, 29 Oct 2020 14:59:41 GMT https://community.splunk.com/t5/Splunk-Search/WinEventLog-input-xmlRegex-modifier-When-did-THIS-become/m-p/527110#M148783 dstaulcu 2020-10-29T14:59:41Z https://community.splunk.com/t5/Splunk-Search/WinEventLog-input-xmlRegex-modifier-When-did-THIS-become/m-p/527117#M148786 <P>I don't know when it first became available, but xmlRegex has been around since 7.0.</P> Thu, 29 Oct 2020 15:31:28 GMT https://community.splunk.com/t5/Splunk-Search/WinEventLog-input-xmlRegex-modifier-When-did-THIS-become/m-p/527117#M148786 richgalloway 2020-10-29T15:31:28Z https://community.splunk.com/t5/Splunk-Search/WinEventLog-input-xmlRegex-modifier-When-did-THIS-become/m-p/527122#M148788 <P>good enough for me. &nbsp;if operating any older of a version id have bigger problems to fixate on. &nbsp;thanks!</P> Thu, 29 Oct 2020 15:44:19 GMT https://community.splunk.com/t5/Splunk-Search/WinEventLog-input-xmlRegex-modifier-When-did-THIS-become/m-p/527122#M148788 dstaulcu 2020-10-29T15:44:19Z