Follow

Comments

3 comments

  • Avatar
    Tom Cignarella

    Is there a way to apply this to *ALL* sources? or at least a "source category"? 

  • Avatar
    Kevin Keechupdate

    Unfortunately there is no simple option to add a filter to all Sources via the UI. Best way to perform this update would be to use the Collector Management API to script the addition of the filters to all your Collectors/Sources.

  • Avatar
    Tom Cignarella

    Working with one of your SE's we came up with a way to run a search for existing credit card data in logs. Sharing in hopes of helping someone else down the road.

    | parse regex "^0-9a-zA-Z._;?[^0-9a-zA-Z._;?]"

     

Please sign in to leave a comment.