[ossec-list] Problem with regexp matching (ignore rule)

[Vianney Lejeune]

Hello,

        I would like to ignore this alert:


server23 smartd[3562]: Device: /dev/sdb, SMART Prefailure Attribute: 1  
Raw_Read_Error_Rate changed from 108 to 107

I tried this regexp:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ smartd\[[0-9]+\]: Device: /dev/ 
sd[^[:alnum:]], SMART Prefailure Attribute: [[:digit:]]+  
Raw_Read_Error_Rate changed from [[:digit:]]+ to [[:digit:]]+$

But it doesn't work. What did I miss ?

Regards,
V