I am sending events to the SL API to create an Event with ‘Use Message-match’ enabled.
Sometimes the source will send events to the API which would just have a issue ID changed, but relating to the same event.
For example.
First post: Issue: broken ID: 39393
Second post: Issue: broken ID: 53291
I want SL to group the events based on the issue, at the moment it would create a new event.
This is my regex
partner=(.*?),sndinterface=(.*?),resourcetype=(.*?),rcvid=(.*?),rcvinterface=(.*?),status=(.*?),glbID=(.*?)
In essence, i want SL to ignore the last field (glbID) when it tries to match the events.
Is this possible?
Thanks