Skip navigation
1225 Views 1 Reply Latest reply: Apr 23, 2012 8:36 AM by Jason Creech RSS
Daren Lahey Level 1 8 posts since
Feb 7, 2012
Currently Being Moderated

Apr 20, 2012 8:49 AM

Control 5213, windows 2008, actual and expected are identical and control fails

Expected

matches regular expression list

Software\Microsoft\OLAP Server

Software\Microsoft\Windows NT\CurrentVersion\Perflib

Software\Microsoft\Windows NT\CurrentVersion\Print

Software\Microsoft\Windows NT\CurrentVersion\Windows

System\CurrentControlSet\Control\ContentIndex

System\CurrentControlSet\Control\Print\Printers

System\CurrentControlSet\Control\Terminal Server

System\CurrentControlSet\Control\Terminal Server\

DefaultUserConfiguration

System\CurrentControlSet\Control\Terminal Server\UserConfig

System\CurrentControlSet\Services\Eventlog

System\CurrentControlSet\Services\SysmonLog

 

Actual

Software\Microsoft\OLAP Server

Software\Microsoft\Windows NT\CurrentVersion\Perflib

Software\Microsoft\Windows NT\CurrentVersion\Print

Software\Microsoft\Windows NT\CurrentVersion\Windows

System\CurrentControlSet\Control\ContentIndex

System\CurrentControlSet\Control\Print\Printers

System\CurrentControlSet\Control\Terminal Server

System\CurrentControlSet\Control\Terminal Server\

DefaultUserConfiguration

System\CurrentControlSet\Control\Terminal Server\UserConfig

System\CurrentControlSet\Services\Eventlog

System\CurrentControlSet\Services\SysmonLog

 

 

I understand that this might just be a case of regular expression syntax but short of trying the "\\" and the "/n" at the end of each line, I still get a fail.

Must be a long week but I don't see what I am missing. Ideas?

 

Thank you,

DJL

 

 

  • Jason Creech Level 3 124 posts since
    May 28, 2010

    Hi Daren,

     

    There are two issues with the expected value:

     

    1.) Backslash needs to be escaped.

    2.) Be careful with line wrap entries.  Entry 8 is wrapped but you pasted this as two entries in the expected value.

     

    You do not need the /n.

     

    Here is what you expected value should look like:

     

    Software\\Microsoft\\OLAP Server

    Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib

    Software\\Microsoft\\Windows NT\\CurrentVersion\\Print

    Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows

    System\\CurrentControlSet\\Control\\ContentIndex

    System\\CurrentControlSet\\Control\\Print\\Printers

    System\\CurrentControlSet\\Control\\Terminal Server

    System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration

    System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig

    System\\CurrentControlSet\\Services\\Eventlog

    System\\CurrentControlSet\\Services\\SysmonLog

     

    Let me know if this makes sense.

     

    Here is a screenshot of the test I made to confirm the regex in Regexpal.com:

     

    Backslash Escape.jpg

     

    JCreech

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 6 points