Nope, that failed too. That is what I originally had. I thought I would try it this way. I am not sure if some are being filtered out or if all are getting through. I do know sometimes I get alot of these and some days just a few.
On Wednesday, March 27, 2013 11:22:08 AM UTC-4, dan (ddpbsd) wrote: > > On Wed, Mar 27, 2013 at 10:49 AM, stones2125 <[email protected]<javascript:>> > wrote: > > I have the following ignore statement in my client config file > > > > <registry_ignore > type="sregex">Enum$|Performance$|Names$</registry_ignore> > > > > If you put these each in their own ignore, do they work? > > > However, I am still getting these alerts > > > > File: > > > HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ASP.NET_2.0.50727\Names > > > > > What am I missing here? > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/groups/opt_out. > > > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
