When using the Parse function in Event Policies, make sure you specify the parsing pattern as exact as possible, especially using the left anchor ^.
Also the usage of ? for "shortest possible string" is a good practice.
Without the left anchor, an additional .* is added at the beginning of the pattern when the policy is generated.
This can destroy your pattern or create unexpected results.
Example, to look for the first part of a Full Qualified domain Name:
string: abc-server.ca.com
Specified pattern: (.*)\..*
Generated pattern: .*(.*)\..*.*
Expected result: abc-server
Result with specified pattern: abc-server.ca
Result with generated pattern: <empty>
Updated pattern to receive the expected result:
^(.*?)\..*
@MichaelBoehm
Message was edited by: Melissa Potvin