wildcard in data group.

Does matchclass work with a * in the datagroup? I'm guessing not.

If not, you could either replace the class with a switch statement and use the glob flag for wildcard matching, or if you like the class, you could replace matchclass with a foreach loop:

  
  when RULE_INIT {  
    
      Create a test class (actually a list in this case)  
     set ::test_class [list abcd abcde abcdef* abcdefg*]  
    
     foreach element $::test_class {  
    
        log local0. "Current \$element: $element"  
    
        if {[string match -nocase $element "ABCDEFG"]}{  
    
           log local0. "Matched \$element: $element.  Exiting loop."  
           break  
        }  
     }  
  }  
  

Log output:

Rule : Current $element: abcd

Rule : Current $element: abcde

Rule : Current $element: abcdef*

Rule : Matched $element: abcdef*. Exiting loop.

Aaron