Skip to main content
Question

REGEX Expressions in Allow List for File Monitor

  • March 11, 2025
  • 3 replies
  • 15 views

In the “File Monitor” Allowlist, can I use REGEX expressions like \d{2} or just ! & *?

3 replies

Jon Rust
Forum|alt.badge.img
  • Employee
  • March 11, 2025

no, it is wildcard matching only


Would be a good enhancement though


  • Author
  • Participating Frequently
  • March 11, 2025

Pretty please, it would be a nice enhancement.  I use the allow list/deny list concept in splunk UF quite a bit.