Release Notes › Known Issues › Event Correlation › Correlation Rule Filters Fail to Identify Incident Events

Correlation Rule Filters Fail to Identify Incident Events

Symptom:

An event correlation rule filter fails to identify events as expected when using wildcards. For example, a rule set to match the value "test*" does not return values beginning with "test", such as "testa"

Solution:

The correlation engine uses strict regular expression syntax as regards wildcards. So in this example, you would have to use "test.*" to return the results you want.