phirayam

Topics I've Started

I think that the regex is missing a pair of quotations. I think that the blacklist lines should look like: blacklist1 = EventCode="4662" Message="Object Type:\s+(?!groupPolicyContainer)" blacklist2 = EventCode="566" Message="Object Type:\s+(?!groupPolicyContainer)" That would explain the error message with the 4 being picked up as a delimeter instead.

Karma from

User

Karma Count

Posts	1
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎10-11-2011

Online Status	Offline
Date Last Visited	‎09-09-2021 08:02 PM

Re: Error with blacklisting 4662 events in inputs....