-
Can I type multiple values in field value (may be separated by comma or semicolon) in conjunction with "exists" (or "is") operator? (documentation at https://docs.utmstack.com/UTMStackComponents/Threat%20Management/FalsePositive.html does not describe operators in details ...) |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
Hi, @lacak-sk the next image shows the possible fields that you can use for tagging rules: The conditions are very intuitive, but we will take note to explain more in the documentation: The values must be specific, we don't have REGEXP at the moment for that part of the system. Best regards |
Beta Was this translation helpful? Give feedback.
The 'is' is similar to equal in this case, 'exists' means that the field exists and don't need to specify a value. For now the we don't have a contain for a list.
The tagging rules aren't stored, are speific for each client data.