We have got few servers which could come with or without FQDN in its name. I'm not sure how Splunk UF generates the hostname of the servers, but it seems not consistent.
So have to filter serverclass to accomodate this
Two questions
1. Is Serverclass able to accomodate proper regex in whitelist?
2. Help with regex below
# below is sample hostnames
myhost.co.uk
myhost
myhost.internal.co.uk
myhostIncorrect.co.uk
somemyhostidontwant.co.uk
I want to extract only
myhost.co.uk
myhost
myhost.internal.co.uk
https://regex101.com/r/qgKCxP/1
I'm using `myhost(?:\.)?.*` but it is capturing `myhostIncorrect.co.uk` which I don't require. How to make it strict so it collects `myhost && myhost\.*` in a single expression?
↧
