FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Andy_G
Staff
Staff
Article Id 192556

Description

Summary of Topic

When writing a custom parser using "collectAndSetAttrByRegex you may need to escape characters that you find in your events.  

The characters that you need to escape are:

.^$*+-?()[ ]{\

 

Version Application

All

 

 

 

Contributors