Hi Everyone,
Have little or no experience with regex, and I am trying to create a query for a policy that would check for
logging 1.1.1.1
or
logging 2.2.2.2
or
logging server 1.1.1.1
or
logging server 2.2.2.2
In short.. am looking for a query that would look for the word logging AND have 1 of thee ip addresses following it, and might or might not have the word host or server in between ?