Need advice: Creating dynamic group using define alphabet in the endpoint name.

[BoonHwee]

Hi community,

Does anyone know how to create dynamic group using define alphabet in the endpoint name.

For example, my endpoints name is ABCP7ABC. I want to create a dynamic group just showing endpoints that have P7 after the first 3 character and not any endpoints that contain P7 (e.g ABCP8ABCP7).

Thank you.

[gjenkins]

---

@BoonHwee wrote:

Hi community,

Does anyone know how to create dynamic group using define alphabet in the endpoint name.

For example, my endpoints name is ABCP7ABC. I want to create a dynamic group just showing endpoints that have P7 after the first 3 character and not any endpoints that contain P7 (e.g ABCP8ABCP7).

Thank you.

---

Hi @BoonHwee,

There's no way to specify a filter expression that indicates the start or the end of a string in Cortex XDR.  So, unfortunately, any filter that you submit which contains "P7" will return results containing that text no matter the position in the text being evaluated.