Stripping prepended URL info

[kwall00]

Does MM have the ability to remove HTTP://  and/or  HTTPS://  from a list of URL's before creating the output file for EDL?

[kwall00 · Accepted solution]

The answer is 'yes'. Here's the regex that worked for me:

indicator:
    regex: ^(http[s]*:\/\/)(.*)
    transform: \2

[xhoms]

Hi @kwall00,

if you're using a feed output node (based on the minemeld.ft.redis.RedisSet class) then you can use the "v=panosurl" URL attribute to achieve the same result ( https://live.paloaltonetworks.com/t5/MineMeld-Articles/Parameters-for-the-output-feeds/ta-p/146170 )

This might be a better solution if you need to share the feed between consumers that have different preferences regarding the protocol prefix.

[Jaymz_Mynes]

@kwall00 

Where do you actually add this regex? I have a need for this, but without using the v=panosurl method.

[Jaymz_Mynes]

Hi @xhoms 

I actually have a need to use the regular expression mentioned above, but not quite sure how to configure this in Minemeld. Any tips for a somewhat noob to Minemeld?