$ 0 0 Use this regex for your rule.logging.*\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b Matthew HawksLoop1 Systems