4 Replies Latest reply on Oct 22, 2016 1:24 PM by eM Ka

    regular expressions & correlation rule

    silvertn

      Hello,

       

      I need to create a new correlation rule  filtered only on source user beginning with  "XX" (case insensitive).

      Do you know if you can use regular expression (regex) in correlation rule  to filter source user?

      If yes,  how can I set it?

      If no, other solutions?

       

      Thank you