We have an aggregator for domain indicators that includes a "wl" miner.
We are trying to use wildcards in the whitelist so that if:
then a.b.xyz.com will be suppressed.
Is this already possible?
If not, would it be done in the aggregator (not the output)?
I'm looking around in class AggregateFT of https://github.com/PaloAltoNetworks/minemeld-core/blob/2f11ab7c73a7bb98f16fcffbe31d9707a32382d4/mine...
Is that the right place?