I need to setup a data synchronization rule in Sentinel to an SQL DB
that has the following, "((rv40:534) OR (rv40:539) OR (rv40:4625)) NOT
(rv32:INCM) NOT (duh:*$)". The part of the query that does not work is
the "(duh:*$)" because you can not have a leading wildcard in Sentinel's
search lucene engine. I am trying to exclude any target username that
has a "$" in the name, basically computer accounts. Can this be done or
is there a better way to exclude computer accounts in this or similar
queries? Many thanks as always in advance for your help.


abel5405's Profile:
View this thread: