cancel
Showing results for 
Search instead for 
Did you mean: 

Who Me Too'd this topic

wl whitelist domain indicators via wildcard

L2 Linker

We have an aggregator for domain indicators that includes a "wl" miner.   

 

We are trying to use wildcards in the whitelist so that if:

  • primary node contains  a.b.xyz.com
  • WL node contains *.xyz.com

then a.b.xyz.com  will be suppressed.

 

Is this already possible?

 

If not, would it be done in the aggregator (not the output)?

 

I'm looking around in class AggregateFT of  https://github.com/PaloAltoNetworks/minemeld-core/blob/2f11ab7c73a7bb98f16fcffbe31d9707a32382d4/mine... 

Is that the right place?

Who Me Too'd this topic