How do I allow a wildcard as part of event criteria while creating a VigilEnt Security Agent for Win (NETIQKB31581)

goal
How do I allow a wildcard as part of event criteria while creating a VigilEnt Security Agent for Windows Detect rule?

fact
VigilEnt Security Agent for Windows 3.0

fact
VigilEnt Security Agent for Windows 3.1

fact
VigilEnt Security Agent for Windows 3.2

fact
VigilEnt Security Agent for Windows 4.0

fix

VigilEnt Security Agent for Windows Detect rules can use Regular Expressions for possible wildcard matches in the match field. A match is a regular expression that specifies a text pattern.

To configure the agent to allow a wildcard as part of event criteria:

1. Open VigilEnt Security Agent for Windows Detect.

2. Select Help |Contents from the Detect GUI menu.

3. Select Regular Expressions from the Contents tab.

For more information, contact Technical Support at www.netiq.com/support.

note
For more information on Regular Expressions syntax, see the VigilEnt Security Agent for Detect help. The documentation can be found at https://www.netiq.com/support/vsa/default.asp.

Formerly known as NETIQKB31581