Search alerts with regex?

[Kevin Watson]

Hello - I'm trying to set up an action policy for some automation, and I'm using the match function to match the description of the alert to a regular expression. I'd like to test this to see if the regex would have matched past alerts in the system so that I can make sure it's picking up only those alerts I want to automate on, so I was hoping there was a way to use the regex pattern in the Alert search, but it seems this is not possible. Does anyone know of a way to 'test' the policy match, so I can see what alerts from the past would have matched the policy?

[Nick Haller · Accepted solution]

Hi @Kevin Watson ,

The Alerts tab cannot query using regex. There is a similar feature request open that allows for better functionality around wildcards that can be followed here: https://jira.atlassian.com/browse/OPSGENIE-217

As for testing regex expressions, sites like this one can help confirm whether or not an expression will work: https://regex101.com/