I have a question on how extent SIEM can query for data.
Can siem query for regex data like the api can.
There is an
add filter button below the search bar where you can
edit the filter as DSL.
Is this what you are looking fore?