Need advice: Creating dynamic group using define alphabet in the endpoint name.

BoonHwee — Tue, 27 Apr 2021 01:52:48 GMT

Hi community,

Does anyone know how to create dynamic group using define alphabet in the endpoint name.

For example, my endpoints name is ABCP7ABC. I want to create a dynamic group just showing endpoints that have P7 after the first 3 character and not any endpoints that contain P7 (e.g ABCP8ABCP7).

Thank you.

Re: Need advice: Creating dynamic group using define alphabet in the endpoint name.

gjenkins — Tue, 27 Apr 2021 16:06:31 GMT

@BoonHwee wrote:
Hi community,

Does anyone know how to create dynamic group using define alphabet in the endpoint name.
For example, my endpoints name is ABCP7ABC. I want to create a dynamic group just showing endpoints that have P7 after the first 3 character and not any endpoints that contain P7 (e.g ABCP8ABCP7).

Thank you.

Hi @BoonHwee,

There's no way to specify a filter expression that indicates the start or the end of a string in Cortex XDR. So, unfortunately, any filter that you submit which contains "P7" will return results containing that text no matter the position in the text being evaluated.

topic Need advice: Creating dynamic group using define alphabet in the endpoint name. in Cortex XDR Discussions

Need advice: Creating dynamic group using define alphabet in the endpoint name.

Re: Need advice: Creating dynamic group using define alphabet in the endpoint name.