Github user cestella commented on the issue:
https://github.com/apache/metron/pull/1083
I think a decent UI that would make this a hell of a lot easier, but also
not embedding stellar in JSON would help a lot. Something like:
```
match {
REGEXP_MATCH(pix_type, '^6-302.*') => 'cisco-6-302',
REGEXP_MATCH(pix_type, '^5-304.*') => 'cisco-5-304',
default => NULL
}
```
is a lot easier to read and deal with. Also, enabling REGEXP_MATCH to take
multiple regexes via a list in the 2nd arg would make things easier.
---
