Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

REGEX filter in transforms.conf file setting question

$
0
0
We're forwarding events to a 3rd party. In our transforms.conf file, the filter looks like the following **REGEX = .** For some reason, this filter capture names without any hyphens. Here's what I'm talking about Success - Computer Failure - Co-m-puter We have computer names with the '-' in them but they don't get captured. Is there a better wild card string that can be used to capture all computer names, regardless of what characters are in them. Thanks!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>