\"the literal " (3410 / 428 / 2216)
event_sub_typethe literal text event_sub_type (case sensitive) \"the literal " (3410 / 428 / 2216)
:the literal : (5810 / 728 / 3A16)
\"the literal " (3410 / 428 / 2216)
Group 1((WAN\s+Firewall)|TLS) 1st Alternative(WAN\s+Firewall) WANthe literal text WAN (case sensitive) \s+any whitespace character, repeated at least once
Firewallthe literal text Firewall (case sensitive) TLSthe literal text TLS (case sensitive) g modifier: global. Finds all matches instead of stopping after the first
m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string