Am Montag, 11. August 2014 12:54:59 UTC+2 schrieb Alexander Pietrasch:
>
> Hey there,
>
> i think i need a little bit help for the regex in Ossec.
>
> I have 3 directorys
>
> /opt/apache-tomcat-VERSION1
> /opt/apache-tomcat-VERSION2
> /opt/apache-tomcat-VERSION3
>
> and i only want to integrity file check this 3 directorys in /opt/. 
> Everything else should not get checked.
>
> I tried it with
>
> <syscheckk>
> <directories realtime="yes" check_all="yes" 
> regex=>^/opt/apache-tomcat-</directories>
> </syscheck>
>
> But it doesn't work.
>
> Questions:
>

1. Does work regex for <directorys>
2. How can i regex this 3 Directorys
 

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to