1 Reply Latest reply on Apr 23, 2012 8:36 AM by Jason Creech

    Control 5213, windows 2008, actual and expected are identical and control fails

    Daren Lahey Level 1

      Expected

      matches regular expression list

      Software\Microsoft\OLAP Server

      Software\Microsoft\Windows NT\CurrentVersion\Perflib

      Software\Microsoft\Windows NT\CurrentVersion\Print

      Software\Microsoft\Windows NT\CurrentVersion\Windows

      System\CurrentControlSet\Control\ContentIndex

      System\CurrentControlSet\Control\Print\Printers

      System\CurrentControlSet\Control\Terminal Server

      System\CurrentControlSet\Control\Terminal Server\

      DefaultUserConfiguration

      System\CurrentControlSet\Control\Terminal Server\UserConfig

      System\CurrentControlSet\Services\Eventlog

      System\CurrentControlSet\Services\SysmonLog

       

      Actual

      Software\Microsoft\OLAP Server

      Software\Microsoft\Windows NT\CurrentVersion\Perflib

      Software\Microsoft\Windows NT\CurrentVersion\Print

      Software\Microsoft\Windows NT\CurrentVersion\Windows

      System\CurrentControlSet\Control\ContentIndex

      System\CurrentControlSet\Control\Print\Printers

      System\CurrentControlSet\Control\Terminal Server

      System\CurrentControlSet\Control\Terminal Server\

      DefaultUserConfiguration

      System\CurrentControlSet\Control\Terminal Server\UserConfig

      System\CurrentControlSet\Services\Eventlog

      System\CurrentControlSet\Services\SysmonLog

       

       

      I understand that this might just be a case of regular expression syntax but short of trying the "\\" and the "/n" at the end of each line, I still get a fail.

      Must be a long week but I don't see what I am missing. Ideas?

       

      Thank you,

      DJL

       

       

        • Re: Control 5213, windows 2008, actual and expected are identical and control fails
          Jason Creech Level 3

          Hi Daren,

           

          There are two issues with the expected value:

           

          1.) Backslash needs to be escaped.

          2.) Be careful with line wrap entries.  Entry 8 is wrapped but you pasted this as two entries in the expected value.

           

          You do not need the /n.

           

          Here is what you expected value should look like:

           

          Software\\Microsoft\\OLAP Server

          Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib

          Software\\Microsoft\\Windows NT\\CurrentVersion\\Print

          Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows

          System\\CurrentControlSet\\Control\\ContentIndex

          System\\CurrentControlSet\\Control\\Print\\Printers

          System\\CurrentControlSet\\Control\\Terminal Server

          System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration

          System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig

          System\\CurrentControlSet\\Services\\Eventlog

          System\\CurrentControlSet\\Services\\SysmonLog

           

          Let me know if this makes sense.

           

          Here is a screenshot of the test I made to confirm the regex in Regexpal.com:

           

          Backslash Escape.jpg

           

          JCreech