Hey,

we want OpManager to create alarms/events when receiving specific syslog messages sent by Palo Alto Networks Firewalls. Incoming syslog messages can be observed however the corresponding syslog rule won't trigger any event. Regex experience is limited but the string to match is simple enough and regex tools show that it _should_ work.

We tried multiple expressions without success: "string",   ".*string.*",  "^(?=.*string).*$"

What are we missing?