pfitchie / graylog3.Fortigate6xContentPack

MIT License
6 stars 13 forks source link

RegEx does not pick up on dashes #5

Open ropeguru opened 4 years ago

ropeguru commented 4 years ago

I am having an issue as the devname is not being captured by extractor because it has dashes in it. Can someone help with the regex update to match hostnames with dashes?

kartone commented 3 years ago

From https://marketplace.graylog.org/addons/f1b25e9c-c908-41e4-b5de-4549c500a9d0

Please find below the working regular expression where it matches correctly for the extractor for this content pack. ^.+devname=\"([^\"]+)\",