SumoLogic

[thefellaguy]

Any experience running these lookups in sumologic?

[mthcht]

@thefellaguy I haven't used Sumo Logic myself, but looking at the docs, it seems the main challenge is that the lookup command doesn't interpret wildcards (*) as "any character". However, the matches operator allows regex-based pattern matching https://help.sumologic.com/docs/search/search-query-language/search-operators/matches/ I think my lookups could work with something like this ?

...
| lookup file://my_list.csv
| where url matches replace(keyword, "*", ".*")