How to exclude svcs that create random string in the name, like "ServiceName_2a0d"

[rn21528nr]

Its primarily OneSyncSvc, WpnUserService and CDPUserSvc. Problems keep appearing but with a random string of characters appended to the name.

What i've tried:

In regular expressions, under windows service names for discovery, i added these values (More than a month ago):

(OneSyncSvc)$

[Result is FALSE

^(WpnUserService)$

[Result is FALSE]

^(CDPUserSvc)$

[Result is FALSE]

Also, in the windows services template, under discovery rules - overrides, I've create rules like
if {#SERVICE.NAME} matches CDPUserSvc , operation - Discover = no , Severity level = not classified

Does anyone know why these aren't working?

[cyber]

You are matching to exact string. Try regex, like matches CDPUserSvc.*
I think even out of the box templates already contain examples with such regexes...
{$SERVICE.NAME.NOT_MATCHES} -> ^RemoteRegistry|MMCSS|gupdate|SysmonLog|clr_optimi zation_v.+|clr_optimization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel\(R\) TPM Provisioning Service|dbupdate|DoSvc$

And don't bother with those global ones, your templates do not use those.