wild cards in watchlists in envision 4
I cannot seem to get any wild cards to work in a watchlist.
I was hoping to use the watchlist to filter event explorer traces.
If I try to use a regex it gives any error message.
If I try non-regex - then nothing seems to work - % \_$. It will only filter if the exact string is matched.
Anyone got this to work?
This is how I think it works:
any ip in 126.96.36.199/16
41\.25\.*.* seems to work
But regex watchlists can't be used in reports or in event explorer ?
In sql it would just be
'41.25.%' - though this might also pick up something like 188.8.131.52??