Decoder: Regex

Document created by RSA Information Design and Development on Jun 25, 2017•Last modified by RSA Information Design and Development on Sep 25, 2017
Version 2Show Document
  • Comment • 0
  • View in full screen mode
  

This topic defines language for the flex parser regex node.

Regex searches the stream payload starting at the read position for matches to a provided regular expression. If matches are found, the offset from the read position and, optionally the matched string, is returned. Any child elements execute. If no matches are found, child elements do not execute.

Language Definition

                         
Attribute NameDescription
nameA number variable to receive the offset from the read position where the match begins.
valueA regular expression to find.
length (optional)A limit to the length of the payload to be searched. If a limit is not provided, the remainder of the payload is searched. It is recommended to always use the smallest value possible here in order to reduce the effect on performance. 
found (optional)The name of a string variable to receive a matched string.
Previous Topic:Payload Functions
Next Topic:String Functions
You are here
Table of Contents > References > Services Config View - Files Tab > Flex Parser > Regex

Attachments

    Outcomes

      Visibility: RSA Security Analytics 10.6.4111 Views
      Last modified on Sep 25, 2017 5:49 AM
      Ratings: