will try ty I think my regex foo was off a bit On Tuesday, October 11, 2016 at 6:41:56 PM UTC-5, Jacob Mcgrath wrote: > > I am looking at logging on a windows agent Teamviewer logs. The issue is > the irregular output like soo. > > 673915615 Support Team 20-05-2016 19:37:51 20-05-2016 20:04:29 > user RemoteControl {811FB7EC-E1EB-470A-B5EE-01E7290B7FDF} > 151856824 01-06-2016 19:30:36 01-06-2016 20:00:44 user > RemoteControl {38164985-5201-4BFE-BF6E-32F2E770954E} > 151856824 02-06-2016 18:29:32 02-06-2016 18:47:33 user > RemoteControl {22D28696-95C0-4AF8-9EBE-440580B85D65} > 172856590 PCMust 16-08-2016 15:15:21 16-08-2016 15:22:54 user > RemoteControl {934B2BDF-DB82-4113-9C60-9250A6E47A7A} > 891956027 Afterworld 18-08-2016 18:13:27 18-08-2016 18:26:37 > user RemoteControl {E4555287-A198-4D54-8851-67C2DF8EA5DD} > > > How would one go about regexing this type of output? > > > The stuff in blue would be the required data to pass to rulesets > >
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.