http://www.ossec.net/doc/syntax/regex.html#os-match-sregex-syntax On Apr 6, 2012 6:16 AM, "Macus" <[email protected]> wrote:
> How to setup the filter in the config file to ignore the file pattern > (RmmJniErr.*) like below? > > /home/abc/program/scripts/RmmJniErr.26673 > > I have tried below in the agent.conf. But it doesn't work. > > > <ignore type="sregex">RmmJniErr.*</ignore> > > > Thanks.
