It looks like you're new here. If you want to get involved, click one of these buttons!
Inside the USERDATA's fielda can be any sort of data. My question is how can I find a string of data out of the field?
In USERDATA1 there is a URL that comes into my OSSIM. I want to be able to pick out a x-number of letters that appear together in the URL. An example of what I am looking to do is:
This is a made up URL:
What I want to do it make a directive that grabs out ".php"?
My question is, how do I write the directive that grabs out that string of data? I know I need to put something in the directive userdata field when I create it, I just do not know what to put in that field. The only data I have been able to enter in and have work is the exact userdata entry that comes in from the log.