AnsweredAssumed Answered

CID 2392 - Expression Confusion

Question asked by rajasekhar.m.reddy on Oct 15, 2013
Latest reply on Nov 1, 2013 by Christophe Delaure

Hi All,

We are confused using the expression for CID 2392 - Current list of User Accounts granted the 'Manage Auditing and Security Log (SeSecurityPrivilege)' right.

 

We have a scenario where we need to check Admin & Log.Audit to be present there.

 

Admin is compulsory value but log.audit is not. Can someone tell me which expression gives me the best evaluation?

Systems without log.audit should also pass but without Admin should fail.

Expression
contains
does not contain
intersect regular
is contained in
matches


Regards,

Raj

Outcomes