Specifying Match Criteria In Standard Rule Text Queries |
When you are specifying text in the Text Query field to indicate the text to be matched in an email notification rule, there are many different ways that you can specify the text to be matched.
- If exactly one word is specified in the Search field, an item is matched if it contains that word.
- If more than one word is specified in the Search field, an item is matched only if all words specified are included in the name. For example,
dog cat |
matches all items containing both dog and cat.
- To match either of two words, include OR between them:
dog OR cat |
This matches all items containing dog or cat. OR must be capitalized.
- To exclude items from a search, put NOT in front of the word that you do not want to include in the search:
NOT dog |
This matches every item that does not contain dog. NOT must be capitalized.
- To match a word and either of two other words, use the following:
animal dog OR cat |
This matches every item that contains animal and dog, or contains animal and cat.
- To create more complicated searches, use parentheses:
animal NOT (dog OR cat) |
This matches all items that contain animal except those that contain dog or cat.
- Another way to exclude items from a search is to put a - character in front of the word that you do not want to include in the search:
animal -cat |
This matches all items that contain animal and do not contain cat.
- To match a phrase that contains spaces, enclose the phrase in quotes:
"Test channel" |
- To include a quote character in a match criterion, precede it with a backslash:
"This search \" contains a quote" |
- To include a backslash in a match criterion, specify two backslashes:
"This search \\ contains a backslash" |
- To match a regular expression, enclose it in slash characters /:
/do+g/ |
This matches d followed by one or more of o followed by g. For example, dog, doog, and dooog are matched.
For a list of all the special characters that can be used in a regular expression, see Using Regular Expression Metacharacters.
 | ||
|
New Feature in Iguana 4.1 The ability to use regular expressions or Boolean expressions as part of the match criteria for an email notification rule is new in Iguana 4.1. This ability enables you to use a single email notification rule to detect a range of possible log messages. | ||
 |