subject:"\[ossec\-list\] OSSEC regular expression example for agent.conf"

Re: [ossec-list] OSSEC regular expression example for agent.conf

2017-08-28 Thread Sean Roe

I'm pretty sure ignores are available in agent.conf Sean On Mon, Aug 28, 2017 at 10:57 AM, dan (ddp) wrote: > On Mon, Aug 28, 2017 at 10:40 AM, Leroy Tennison > wrote: > > I'm having trouble getting an ignore expression to actually ignore a > change

Re: [ossec-list] OSSEC regular expression example for agent.conf

2017-08-28 Thread dan (ddp)

On Mon, Aug 28, 2017 at 10:40 AM, Leroy Tennison wrote: > I'm having trouble getting an ignore expression to actually ignore a change > and suspect it's due to not understanding how OSSEC regular expressions > work. When I searched for examples I found very little so

[ossec-list] OSSEC regular expression example for agent.conf

2017-08-28 Thread Leroy Tennison

I'm having trouble getting an ignore expression to actually ignore a change and suspect it's due to not understanding how OSSEC regular expressions work. When I searched for examples I found very little so I'm hoping someone can reply with examples or explanations. What I tried was: