subject:"\[ossec\-list\] Re\: regex in agent id field"

[ossec-list] Re: regex in agent id field

2016-12-12 Thread Sean Roe

Thanks, I think I will be using the profiles option. Sean On Friday, December 9, 2016 at 2:56:19 AM UTC-7, Jesus Linares wrote: > > Hi Sean, > > it seems that agent_config name > is > checked by the function OS_Match2 >

[ossec-list] Re: regex in agent id field

2016-12-09 Thread Jesus Linares

Hi Sean, it seems that agent_config name is checked by the function OS_Match2 which only matches strings with *^*, *$* or *|* special characters. So,