About elvis5

elvis5 · ‎03-13-2023

Thanks it works!

elvis5 · ‎03-13-2023

When I try use : transforms.conf [setnull] REGEX = 192\.168\.1\.50, 172\.16\.1\.50 DEST_KEY = queue FORMAT = nullQueue props.conf [cisco] TRANSFORMS-null = setnull In event I get all result. But when I use only one ip its woks good. If any way for exclude more than one ip.

elvis5 · ‎03-13-2023

Good day . Let suppose ihave ip 172.16.1.50, 192.168.1.50 and 192.168.2.0/24 in the event which generate all these firewall logs and i want exclude these events. What syntaxis in REGEX

Posts	3
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎03-13-2023

Online Status	Offline
Date Last Visited	‎03-13-2023 11:05 AM

Way to exclude ingestion of events for a specific ...

Re: Way to exclude ingestion of events for a speci...

Way to exclude ingestion of events for a specific ...

Re: Easiest way to exclude ingestion of events for...