Regular Expression Policy reporter

Question

Hey,

I am currently trying to finish off reports in Cirrus Policy reporter and I have a few rules I need some help with. I have never used Reg Ex before now and I am having difficulty using the information provided online.

In short here is what I am looking for. I have used the line ip finger as an example.

I need a Reg Ex to search for the line ip finger The search is for both words together and not each individually and also the search must ignore any characters before or after IP finger on the same line.

So far if I search ip finger it will show and line that contains ip finger even if the lines is no ip finger as it still fits the search criteria.

Does anyone know how to write a reg ex that will only search for the specified words only?

Thanks in advance

Cheers

Yann · Answer

Hi,

I would advise to open a support ticket so that someone will be able to work with you on one of your "no ip finger" devices to find out the right Regex.

R,

Yann

Ciag · Answer

Hi Yann

I'll try the Reg ex you gave me in the morning as I'm after getting caught up in something else.

Ip finger and a number of other commands are giving me trouble. the reason being most device types do not show the no version of the command in their running config.

However some do show no ip finger in their running configs. But all devices I've seen so far do show the positive (ip finger) when it is enabled in their configs so that is why I'm looking to search for Ip finger only not no ip finger

It's a complete pain in the neck and not a Solarwinds issue at all but a Cisco Issue.

Cheers

Yann · Answer

Hi,

I tried to test it in the lab but when I type in no ip finger that line never appears in the configuration.

I tested it on a few models.

Can you give a try to the below regex:

.*
(.*
)(ip finger|ip-finger).*
(.*
)

This regex search for ip finger or ip-finger and checks that one or more line breaks are present before and after the string.

EDIT: I removed the *.* beside the (ip finger|ip-finger) string. Not sure yet if the dash - will be considered as a special character. In case it is try: (ip finger|ip\-finger)