Hi all!

I have little challenge.

So,

I want to create a rule in which "URL (custom)" property will be selected from the Reference Set.

For example, I receive an event that has "URL (custom)" property : example.com. I have a Reference Set named "BadURLs" which contains: mail.example.com, web.example.com, example.com/test and etc. If the "URL (custom)" property received from the event at least partially matches any of the "BadURLs" Reference Set, then the rule should be triggered. I think it is possible to use an AQL with regular expressions in my rule, but I don't know how to write the rule correctly.

Please, assist.

Thanks everyone!

Hello Yevgeniy,

This is not possible. You cannot look for a partial matches inside a reference set. Thanks