Hi all,
Can anyone have a solution on how to use regex on Source user filter, when creating correlation rule?
I mean, I want the correlation rule not to trigger when the Source user field is empty. And this how I can do it without regex is my second question?
Thank you in advance.