Windows service regex filter being ignored

[CyberMage256]

Running zabbix-appliance Docker image and I've configured "Windows service names for discovery" as follows:

Result is false: ^(MMCSS|gupdate|TrustedInstaller|SysmonLog|clr_opt imization_v2.0.50727_32|clr_optimization_v4.0.3031 9_32|OneSync.*)$

Result is false: ^(OneSyncSvc.*)$


These options appear to be ignored, as even after "Unlink and clear" for the "Template OS Windows by Zabbix agent" and then adding it back, it will ulitmately report on both TrustedInstaller and OneSyncSvc.????

I run a test of the Regex with either service name and get "Combined result" of "FALSE" so it appears the regex is functioning properly.

I'm using the passive Windows OS agent template. Am I just missing a checkbox that turns on the regex filters?

[CyberMage256]

I figured out you have to edit the "SERVICE.NAME.NOT_MATCHES" macro inside the "Template Module Windows services by Zabbix agent" - it looks like the service doesn't use the global Regex setting? I have no idea what the Admin+General+Regular Expressions+Windows Service Names for Discovery option is actually for then because it's not being used.

[Sebastian]

Hello CyberMage256
I have faced your issue before
"*" is not regex based match.
Please try regex as folowing:

^(OneSyncSvc_[B][a-zA-Z0-9]*[/B]|ExampleService)$

or with dot

^(OneSyncSvc.[B][a-zA-Z0-9]*[/B]|ExampleService)$

Best Regards
Sebastian