AppD Archive

Syntax format for a Custom Match rule "Is In List"

walterk82
Path Finder

What is the syntax format for a Custom Match rule "Is In List"?  Space or comma delimited?

Tags (1)
0 Karma

Arun_Dasetty
Super Champion

Hi,

it is separated by symbol comma (,) ex:

Servlet URI (is in list) : /basic,/test1,/test2/login

Hope that answers your query.

Regards,

Arun

0 Karma

walterk82
Path Finder

Yes, I finally discovered that after tiral and error.  Is there a resason that this is not in the product documentation?

0 Karma

Arun_Dasetty
Super Champion

Hi,

As the syntax is general for java string and for other optiosn like reg ex and hence we do not have listed explicit examples for each sub option and customer can always raise query if he face any issues or trouble getting the syntax if required, hope that make sense to you.

Regards,

Arun

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...