Templates and Alerts

UNIX Regular Expressions

When you attemp to match the pipe (), ampersand (&) or the comma (,) character in a regular expression, you must escape those special characters using a backslash (\) character because these three characters also have special meaning (i.e., are used as delimiters) by the parser of the template property syntax. For example, a pathname of ´a\b will have the backslash removed by the template property parser before being passed as a regular expression to the regular expression parser (i.e., as ´ab ). To match a pathname that contains one of these three characters, one must escape the backslash and the special character itself (i.e., ´a\\\b will be passed to the regular expression parser as ´a\b).

Appendix A

127

Page 139
Image 139
HP Host Intrusion Detection System (HIDS) manual Appendix a 127