On 05/05/2012 09:13 PM, dan (ddp) wrote:
\p?
Otherwise, provide a sample please.
On May 4, 2012 4:18 PM, "carlopmart" <[email protected]
<mailto:[email protected]>> wrote:
Hi all,
I am trying to write a new decoder to process CEF log formats, but
I have a problems to escape '|'. For example:
<regex offset="after_prematch">^\d\|\__d+\|</regex>
doesn't works ... How can I escape '|' special character??
Thanks.
--
CL Martinez
carlopmart {at} gmail {d0t} com
\p?? According to http://www.ossec.net/doc/syntax/regex.html, \p only
escapes ()*+,-.:;<=>?[], but not |
--
CL Martinez
carlopmart {at} gmail {d0t} com
