Rexgex Extractor - always in upper case?


#1

Hi, Graylog-friends,
i have a regex extrator for a Symantec Endpoint Protection Log. Unfortunately, Symantec sometimes writes the username in upper case, sometimes lower case. Like

…,Username: peter, …
…,Username: PETER, …

Regular expressions:
,Username: (.+?),

Is there a way in Graylog regular expressions, to get the resul always in upper case?


(Jochen) #2

No, but you could use a custom pipeline rule to make the string upper case: http://docs.graylog.org/en/2.2/pages/pipelines/functions.html#uppercase


#3

Thank you for this quick response! I will take a look at the custom pipelines.


(system) #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.