After the SecurityIQ found a file matching the configured classification rule, by default, for security reasons, the matching string will not be displayed
when double clicking the row."No regular expression values were found in the current file" message will be displayed.
To enable the display option the configuration need to be changed in the database:
SELECT *
FROM [SecurityIQDB_Training].[whiteops].[DC_Parameters]
Where Code = 'SaveMatchingRegexValues'
Change the value to 'true':
UPDATE [SecurityIQDB_Training].[whiteops].[DC_Parameters]
SET Value = 'true'
WHERE Code = 'SaveMatchingRegexValues'
After changing it, restart the relevant Data Classification service.
Thanks Tom, it works! But seems the data classification service need to be restarted. And it should be also work for the indexed file before this configuration change.
Cheers,
Tony
Sorry, it does not work for the indexed files before the change. Reindexing is needed to show the matching strings.
Cheers,
Tony
Notice that this article is relevant for version prior to 6.1