How to alert correctly with quotes from the endpoint log?

[gsmith]

Hello @no-good-username

Perhaps this post will help.

Graylog search query - regex

try source:/“FB100D-ADV-[1-2]”/ The issue you’re having is that you need to escape the hyphens when you are searching normally, but they don’t need to be escaped when you are doing a RegEx search as they are not listed as characters requiring escaping for RegEx in ES.