I have to set up an Event Rule to Populate 'POP Details' from the 'Source' field of the Event.
When I'm creating RegEx by dragging the mouse, it is working but when I'm writing a custom RegEx, it is not working.
Sample Event's Source:
abc1.auc-001.ao-xyz.co
xyz2.ccd-005.xo-abc.io
Here I want to capture the characters in between 1st and 2nd dot(.) and assign it to 'POP Details' field of 'em_alert' table. For this I'm using this RegEx-
/\.([^.]*)\./
This RegE is tested in https://regex101.com/ it's returning the desired value, but I'm not getting desired value while using it through Event Rule's Transform and Compose Alert Output option.
After this Event is processed by Event Rule, <<UNKNOWN>> gets mapped in 'POP Details' field of 'em_alert' table.
If anyone has any suggestion to rectify this issue it will be highly appreciated.
