Automation/API Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Discussions

Regex evaluating new line carriage ?

I have a Splunk server that logs all Acitve Directory authentication events on my network. I have set up a syslog feed from the Splunk server to the Palo Alto. On the Palo Alto, I have created a syslog filter and added the Splunk as a User-ID syslog

...

PreDefined SSN Pattern Match

Hi All,

A Social Security number (SSN) CANNOT :

* Contain all zeroes in any specific group (ie 000-##-####, ###-00-####, or ###-##-0000)
* Begin with ‘666’.
* Begin with any value from ‘900-999′
* Be ‘078-05-1120′ (due to the Woolworth’s Wallet F

...

rsingh by L2 Linker
  • 2890 Views
  • 3 replies
  • 0 Likes

RegEx looking for a specific UserAgent.

I tried to migrate over my Cisco IPS regex to Palo Alto but it failed to load. Below is my Cisco Regex.

[Uu][Ss][Ee][Rr][-][Aa][Gg][Ee][Nn][Tt][:][\x20][^\x0d\x0a]*([Ss][Yy][Nn][Aa][Pp][Ss][Ee])

I tried creating a new pattern but it is to specific and

...

scantwell by L4 Transporter
  • 2062 Views
  • 2 replies
  • 0 Likes
Top Liked Authors