Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
hbowlin
New Contributor

Event Handler with Regular Expression

I'm trying to create an event handler to only trigger an email after business hours, but the regular expression I'm using doesn't seem to work. How do you specify regular expression in the generic txt filter. This is the regex I'm trying to use.

 

(itime ~ ^2[0-3]:[0-5]?[0-9]:[0-5]?[0-9]$) or (itime ~ ^[0][0,1,2,3,4,5]:[0-5]?[0-9]:[0-5]?[0-9]$) or (itime ~ ^[1][5,8-9]:[0-5]?[0-9]:[0-5]?[0-9]$)

1 REPLY 1
hbowlin
New Contributor

Created a support ticket on this. The solution was to use the following generic txt filter

 

time ~ "18:[0-9][0-9]:[0-9][0-9]" or time ~ "19:[0-9][0-9]:[0-9][0-9]" or time ~ "20:[0-9][0-9]:[0-9][0-9]" or time ~ "21:[0-9][0-9]:[0-9][0-9]" or time ~ "22:[0-9][0-9]:[0-9][0-9]" or time ~ "23:[0-9][0-9]:[0-9][0-9]" or time ~ "0:[0-9][0-9]:[0-9][0-9]" or time ~ "01:[0-9][0-9]:[0-9][0-9]" or  time ~ "02:[0-9][0-9]:[0-9][0-9]" or time ~ "03:[0-9][0-9]:[0-9][0-9]" or time ~ "04:[0-9][0-9]:[0-9][0-9]" or time ~ "05:[0-9][0-9]:[0-9][0-9]" or time ~ "06:[0-9][0-9]:[0-9][0-9]"

Labels
Top Kudoed Authors