{% extends "siem/base.html" %} {% block sub-title %}Regex Tips | {% endblock %} {% block content-main %}
Regular expression tips for use with LogESP
Match either EXPRESSION1 or EXPRESSION2:
(EXPRESSION1|EXPRESSION2)
Match an expression literally (not just any field that contains it):
^EXPRESSION$
Filter out an expression in a field:
^(?!EXPRESSION){% endblock %}