<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Wildcards in Log Filtering in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44059#M32345</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Ben,&lt;/P&gt;&lt;P&gt;No I get the same result even in a report.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Leigh&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 24 Jul 2015 05:14:35 GMT</pubDate>
    <dc:creator>LeighV</dc:creator>
    <dc:date>2015-07-24T05:14:35Z</dc:date>
    <item>
      <title>Wildcards in Log Filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44055#M32341</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;I'm trying to figure if if I can use wild cards when constructing a filter in Monitor -&amp;gt; URL Filtering.&amp;nbsp; I want to get all records that contain '@*.domain.com'.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;My current filter is ( url contains &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:'@staff.domain.com"&gt;'@staff.domain.com&lt;/A&gt;&lt;SPAN&gt;' ) what I want is ( url contains '@*domain.com' )&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Can this be done?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;thanks&lt;/P&gt;&lt;P&gt;Leigh&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Jul 2015 03:11:34 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44055#M32341</guid>
      <dc:creator>LeighV</dc:creator>
      <dc:date>2015-07-24T03:11:34Z</dc:date>
    </item>
    <item>
      <title>Re: Wildcards in Log Filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44056#M32342</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hey Leigh,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Sure you can do this in the URL log, but make sure you put the '.' in. So your query would look like this:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;(url contains '*.domain.com')&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;hope this helps,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Ben&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Jul 2015 04:40:44 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44056#M32342</guid>
      <dc:creator>bmorris1</dc:creator>
      <dc:date>2015-07-24T04:40:44Z</dc:date>
    </item>
    <item>
      <title>Re: Wildcards in Log Filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44057#M32343</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hey thanks Ben, but unfortunately this is not returning any data??&amp;nbsp; My query is &lt;STRONG&gt;( url contains '*.domain.com' )&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;but is not returning anything, however if I do &lt;STRONG&gt;( url contians 'staff.domain.com' )&lt;/STRONG&gt; I get the data I expect.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Not sure why this is.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Jul 2015 04:48:26 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44057#M32343</guid>
      <dc:creator>LeighV</dc:creator>
      <dc:date>2015-07-24T04:48:26Z</dc:date>
    </item>
    <item>
      <title>Re: Wildcards in Log Filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44058#M32344</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi Leigh,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I don't have a device at hand to test this at the moment unfortunately, it was my understanding that this query would work. Do you get any results when running&amp;nbsp; a custom report with the query?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;thanks,&lt;/P&gt;&lt;P&gt;Ben&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Jul 2015 05:07:38 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44058#M32344</guid>
      <dc:creator>bmorris1</dc:creator>
      <dc:date>2015-07-24T05:07:38Z</dc:date>
    </item>
    <item>
      <title>Re: Wildcards in Log Filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44059#M32345</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Ben,&lt;/P&gt;&lt;P&gt;No I get the same result even in a report.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Leigh&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Jul 2015 05:14:35 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44059#M32345</guid>
      <dc:creator>LeighV</dc:creator>
      <dc:date>2015-07-24T05:14:35Z</dc:date>
    </item>
    <item>
      <title>Re: Wildcards in Log Filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44060#M32346</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi Leigh,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I've had a chance to have a go myself, l&lt;SPAN style="font-size: 10pt; line-height: 1.5em;"&gt;ooks this you can't do this unfortunately. My advice would be to add all the sites you want to search for to a custom URL filtering category, that way you can do a search on the category. You can use wildcards in custom categories.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-size: 10pt; line-height: 1.5em;"&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-size: 10pt; line-height: 1.5em;"&gt;Ben&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Jul 2015 06:33:29 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44060#M32346</guid>
      <dc:creator>bmorris1</dc:creator>
      <dc:date>2015-07-24T06:33:29Z</dc:date>
    </item>
    <item>
      <title>Re: Wildcards in Log Filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44061#M32347</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I think the best you'll be able to do is this:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;(url contains '@') and (url contains .domain.com)&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Jul 2015 13:13:49 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/wildcards-in-log-filtering/m-p/44061#M32347</guid>
      <dc:creator>jvalentine</dc:creator>
      <dc:date>2015-07-24T13:13:49Z</dc:date>
    </item>
  </channel>
</rss>

