Data group with special characters

Why couldn't they help with the question? You should be able to use / and ? and other meta-characters as string class elements. I just couldn't figure out how to include a newline or other character.

Here is a quick test that worked on 10.1:

 
  b class chars_class list 
 class chars_class { 
    { 
       "www.example.com/path/to/file.ext?param=value" 
    } 
 } 
 

 
 when RULE_INIT { 
  
    log local0. "class search1: [class search chars_class contains "file.ext"]" 
    log local0. "class search2: [class search chars_class contains "www.example.com/path/to/file.ext?param=value"]" 
    log local0. "class search3: [class search -element chars_class contains "www.example.com/path/to/file.ext?param=value"]" 
 } 
 

: class search1: 1

: class search2: 1

: class search3: www.example.com/path/to/file.ext?param=value {}

Aaron