or you can prepend (?i)
On Friday, February 10, 2017 at 5:58:45 PM UTC-6, Richard S. Westmoreland wrote: > > Yea regex is case sensitive. You could try: > > [Aa]pp[Dd]ata\\[Ll]ocal\\[Tt]emp\\.+\.(EXE|exe) > > > > On Feb 11, 2017, at 6:54 AM, Tom Powers <[email protected] > <javascript:>> wrote: > > > > AppData\\Local\\Temp\\.+.exe > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/00c8b9f6-40d7-4b5d-bc49-9a07970ea647%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
