Forum Discussion
Kevin_Stewart
Oct 23, 2013Employee
Agreed. Something like this:
when HTTP_REQUEST {
if { [HTTP::uri] matches_regex {^/A(B|C)DEF/test-(10|20|30|40|50|60)/(one|two|three|four|five|six|seven|eight)/(2013|2014)/(.)} } {
log local0. "match"
} else {
log local0. "no match"
}
}