Currently I have a rule filtering by IP address then references 172.31.250.1 and moves those devices to a different display and log file. However, a rule that matches "172.31.250.1" also matches "172.31.250.13" and "172.31.250.14", which are two other devices that I syslog from that I do NOT want to have match the 17.31.250.1 address. What I want is either make the "" around an IP address signify EXACTLY that IP address (and not behave like a wildcard, something lik "*ip*" or create a new end of string like 'ip' that means exactly that IP address and nothing more.