OPAL case sensitive filtering with match_regex¶
OPAL filters are case-insensitive by default. Case sensitive filtering is used when the filter
verb is combined with the match_regex
function.
match_regex¶
Use the filter
verb’s support for OPAL functions to call match_regex
, which can use the case insensitivity regular expression flag.
log: 2024-04-06T12:49:00Z,eventName=GetPolicy
filter match_regex(eventName,/GetPolicy/) //matches
filter match_regex(eventName,/getpolicy/) //does not match
filter match_regex(eventName,/getpolicy/i) //matches