000025470 - How to create an Alert filter for empty fields

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000025470
Applies ToAlert
Filter
Empty
Null
Field
Correlation
Rule
IssueHow to create an Alert filter for empty fields
Resolution

The NOT LIKE and LIKE filter options perform a regular expression comparison.

Create a filter with NOT LIKE .

Notice above it's NOT LIKE and the period sign which means in regular expression any single char

For example:

Username NOT LIKE .

The above will filter only on empty user name fields

Legacy Article IDa38365

Attachments

    Outcomes