IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Offense escalation with regex

    Posted 04/01/19 09:11 AM
    Hi,

    Is it possible to filter offense description from Qradar escalation using regex value from Resilient Apps ?
    thumbnail image
    Look like working only with wilcards.


    Regards
    Fabien

    ------------------------------
    Fabien
    ------------------------------


  • 2.  RE: Offense escalation with regex

    Posted 04/01/19 11:34 AM
    Hi Fabien

    unfortunately, the answer is no, the placeholder string "Value Regex" here is really misleading and it only <g class="gr_ gr_165 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar multiReplace" id="165" data-gr-id="165">support</g> very simple wildcard character "*" and "?", rather than complex RE expression.

    ------------------------------
    Yu Zhang
    ------------------------------



Related Content