An engineer’s organization system is registered in the following manner: .
The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate ‘User’ indicator automatically once a system is found.
What is the most efficient way for the engineer to achieve this?

Question

An engineer’s organization system is registered in the following manner: <SiteName-SystemIDUsername>.

The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate ‘User’ indicator automatically once a system is found.

What is the most efficient way for the engineer to achieve this?

Konstantinos Lagoudakis · Accepted Answer

Create a new indicator type of the internal username and set a formatting script to extract only the username

Konstantinos Lagoudakis · Answer

Create a custom indicator field named ‘username’ and link it to the internal system indicator

Konstantinos Lagoudakis · Answer

Change the reputation command for the internal system indicator type

Konstantinos Lagoudakis · Answer

Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 47 - PCSAE discussion

Suggested answer: C

0 comments