Creating a new visualisation I just came across a curious case of regex filtering.
The following Regex Lucene filter is what I had to use to show only values containing both upper and lower caps:
Works
dns.question.name:/.*[A-Z].*/ and NOT (dns.question.name:/.*[A-Z].*/ and NOT dns.question.name:/.*[a-z].*/)
It looks pretty convoluted, but it must be done this way to not match entries in all lower- or all uppercase. The following would be simpler from a regex point of view but doesn't work. Presumably due to the lookahead?
Doesn't work
dns.question.name:/(?=.*[a-z])(?=.*[A-Z]).*/