Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make search command's Filter option an exact match #1240

Closed
YamatoSecurity opened this issue Dec 20, 2023 · 0 comments · Fixed by #1249
Closed

Make search command's Filter option an exact match #1240

YamatoSecurity opened this issue Dec 20, 2023 · 0 comments · Fixed by #1249
Assignees
Labels
invalid This doesn't seem right
Milestone

Comments

@YamatoSecurity
Copy link
Collaborator

Right now the Filter option does wildcard matching so even if you are trying to extract out just EID 1 events with a filter like -F EventID:1, it will output all events with an ID with 1 in it so I want to change this to an exact match filter.
Also, it would be nice to support wildcard * characters so that if a user wanted to filter on something like -F EventID:"*1*" they could.

@hitenkoku hitenkoku self-assigned this Dec 20, 2023
@hitenkoku hitenkoku added the invalid This doesn't seem right label Dec 20, 2023
@hitenkoku hitenkoku modified the milestones: v2.12.0, v2.13.0 Dec 20, 2023
hitenkoku added a commit that referenced this issue Jan 11, 2024
hitenkoku added a commit that referenced this issue Jan 11, 2024
hitenkoku added a commit that referenced this issue Jan 23, 2024
…ds-filter-option-an-exact-match

feat: added wild card and exact search in filter option #1240
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
invalid This doesn't seem right
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants