Regular expression DONT WORK

[1bsot]

Hi,
I have been getting messages regarding problems of services that are not running.
I went through all the posts here to how to filter these events.
I edited regular expression and tested it and the result is false ( which as I understand is a good thing!).
I also tried changing the wildcards (^/!?* ) still nothing after waiting hours or days........
Still nothing I do filters the unwanted events.
attaches is a screenshot of the regular expression screen


Please H.E.L.P.!!!!!!!!!!!!!!

[cyber]

Have you tried that "Test" there? Probably noticed, that when you enter something for testing, then only one line says TRUE and others say FALSE...? And "Combined result" is also FALSE..? That is because your test item has to pass all lines of this regex with "TRUE" so combined result could be TRUE. So, you cannot put those services on separate lines, keep adding them to first line with | until you run out of space.. And then write a JS based preprocessing instead of this...

[cyber]

Disregard that crap I wrote, I must have been sleeping, while writing this...This is ignore filter... Everything that comes through filter, are the things you need. Getting combined as FALSE is required...

So. if testing gives correct result and discovery rule does not, then maybe you really have to look at that rule again. Is there correct reference to global regex in filter, correct filter type etc... Clean up host from old items and let discovery run again, things do not disappear right away, Keep lost resources period is by default quite high, IIRC...