Scan URL from emails.

[David_Chhuon]

Hi community,
I am working on a playbook where I want to scan URL from emails. I have setup the exchange connectors and alerts are working pretty fine. The field named “urls” contains all the urls found in the emails. Basically, Siemplify separates each url by a semi-colon and uses this semi-colon as a delimiter in the ontology. My issue is that I have a semi-colon in my url resulting splitting my URL into 2 which makes no sense.
Is there a way to solve this?
Thank you.

[Tomtomfridman]

Hi @David_Chhuon
Thank you for writing us.
you can try use this solution-
Link to the regex expression builder https://regex101.com/r/t767uT/2

[David_Chhuon]

Hi @Tomtomfridman
Thank you for your answer. Using regex sounds to be a great solution. I have changed your syntax to match what I need.
However I have noticed that there is a character limitation in Siemplify in the extraction function to regex pattern ... My regex is too long.
I tried to use transformation function but it did not work as expected.
Do you have any idea to bypass this character limitation ?
Please find my regex here.
https://regex101.com/r/Pb7BfN/1
David.

[Tomtomfridman]

Hi @David_Chhuon
So, first of all, you are right about the limitations, and I recommend opening a tick about that.
In addition, here is another and shorter option for a regex that maybe will help you?
https://regex101.com/r/vFfj50/1