The regular expression used to identify objects larger than 5GiB in StorageGRID audit logs is inaccurate.
In this expression CSIZ\(UI64\):[0-9]*[5-9][0-9]{9}, a number between 5 and 9 ([5-9]) followed by 9 numbers ([0-9]{9}) are mandatory, this expression only matches numbers between 5GiB and 10GiB, or between 15GiB and 20GiB, or between 25GiB and 30GiB, ...
Number between 10GiB and 15GiB, or between 20GiB and 25GiB, ... are not matched.
In my opinion, a better regular expression could be: CSIZ\(UI64\):([5-9]|[1-9][0-9]+)[0-9]{9}
Public issues must not contain sensitive information
Page URL
https://docs.netapp.com/us-en/storagegrid-118/troubleshoot/troubleshoot-s3-put-object-size-too-large-alert.html
Page title
Troubleshoot S3 PUT Object size too large alert
Summary
The regular expression used to identify objects larger than 5GiB in StorageGRID audit logs is inaccurate. In this expression
CSIZ\(UI64\):[0-9]*[5-9][0-9]{9}
, a number between 5 and 9 ([5-9]) followed by 9 numbers ([0-9]{9}) are mandatory, this expression only matches numbers between 5GiB and 10GiB, or between 15GiB and 20GiB, or between 25GiB and 30GiB, ... Number between 10GiB and 15GiB, or between 20GiB and 25GiB, ... are not matched. In my opinion, a better regular expression could be:CSIZ\(UI64\):([5-9]|[1-9][0-9]+)[0-9]{9}
Public issues must not contain sensitive information