About yunusemreakbaba

martin_mueller · ‎03-09-2013

You could write two regular expressions, each containing TCP or UDP - then each expression will only match their respective event type. Alternatively, write one expression with the two in parenthesis and separated by a pipe.

dmiller2010 · ‎01-15-2013

The field for destination_addr is supported in another rule available in the latest beta for 2.0. You will need to register for it on our website: http://www.netflowlogic.com. If you have any additional questions or support requests, please see our support site at: https://netflowlogic.zendesk.com/home

Posts	3
Solutions	0
Karma Given	2
Karma Received	0
Member Since	‎09-18-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

conditional rex in field extraction

netflow missing fields problem with flowIntegrator

Re: conditional rex in field extraction

Re: netflow missing fields problem with flowIntegr...