cancel
Showing results for 
Search instead for 
Did you mean: 

ProTip for SIEM: How to use regex to query ELM in the most efficient manner

ProTip for SIEM: How to use regex to query ELM in the most efficient manner

The ELM uses bloom indexes to optimize queries. While almost any Perl Compatible Regular Expression (PCRE) can be used for ELM searches, not every PCRE expression can be optimized to use the bloom. For more information on how to use regex to efficiently query ELM, see KB86052.

Version history
Revision #:
1 of 1
Last update:
‎02-09-2016 07:47 AM
Updated by: