REST APIs 25.3

{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "anyOf": [
    {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "property",
        "operator",
        "values"
      ],
      "properties": {
        "property": {
          "description": "The workload property to compare. (hostname, ip_address etc.)",
          "type": "string",
          "enum": [
            "hostname",
            "ip_address",
            "os",
            "process",
            "port"
          ]
        },
        "operator": {
          "description": "operator for the condition (starts_with, contains, equals, ends_with, is_in, regex)",
          "type": "string",
          "enum": [
            "starts_with",
            "ends_with",
            "contains",
            "equals",
            "is_in",
            "regex"
          ]
        },
        "values": {
          "description": "Value to use in comparison",
          "type": "array",
          "items": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "object",
                "properties": {
                  "port": {
                    "description": "Port Number (integer 0-65535). Also the starting port when specifying a range.",
                    "type": "integer",
                    "minimum": 0,
                    "maximum": 65535
                  },
                  "to_port": {
                    "description": "High end of port range inclusive if specifying a range. If not specifying a range then don't include this.",
                    "type": "integer",
                    "minimum": 0,
                    "maximum": 65535
                  },
                  "proto": {
                    "description": "protocol number",
                    "type": "integer"
                  }
                }
              }
            ]
          }
        }
      }
    },
    {
      "type": "object",
      "required": [
        "logical_operator",
        "child_expressions"
      ],
      "properties": {
        "logical_operator": {
          "description": "logical operator for the child expressions",
          "type": "string",
          "enum": [
            "and",
            "or",
            "not"
          ]
        },
        "child_expressions": {
          "type": "array",
          "items": {
            "$ref": "#"
          }
        }
      }
    }
  ]
}

In release 25.3, this schema has a new operator: regex. It was added to the existing list of supported operators in APIs (request and response) .

For Hostname, OS, and Process, these are the 'regex' operator examples:

Hostname regex '^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\\.illumio\\.com$'  
#will match any hostname under the illumio.com domain

Hostname regex '/^(?=.*?(pc|fileserver|notebook))(?=.*?\d)[a-z\d-]+$/'          
#will match something like fileserver-win2019 

OS regex '*win*'                                                                
#will match with anything that has win in it

OS regex '/\b(lin|centos|ubuntu|redhat)\b/i'                                    
#will match Linux, linux, Centos-3.7.0 , ubuntu-x86_64-xenial 

Process regex '^/.*/chshell$'                                                   
#will match /user/bin/chshell. regex uses the ^ and $ anchors to match the beginning and end of the string

Process regex ''

For IP Address 'regex'

IP Address regex '^(192\.168)\.([01]?[0-9]?[0-9]|2([0-4][0-9]|5[0-5]))\.
([01]?[0-9]?[0-9]|2([0-4][0-9]|5[0-5]))$' 
#will match IP addresses in the range of 192.168.0.0 - 192.168.255.255: 

IP Address regex '^(\\d{1,3}\\.){3}\\d{1,3}$' 
will match any IP address in the format xxx.xxx.xxx.xxx

To learn more about using regex, see Add Labeling Rule in Security Policy Guide.