2019-09-26 03:07 AM
Hello,
I just wanted to know something about the "truncdomain" option in RSA Feeds
I have a CSV file containing a list of domain, and I send a log to rsa to check if it matches the feed
If a take "www.google.com" as an example, and the log contains the same domain, no matter if I put truncdomain to true or false, i get the same result -> The Feeds doesn't match
But when I set "google.com" in the CSV file, it works
So, how does the truncdomain works ? and does it truncate only the first part of domain ? and does it works on several level ? (what he gonna keep if my domain is www.test.message.google.com for example ?)
Thanks in advance