how to stop a service and variations of that service?

[bcoleman]

Hi All

We have a number of servers running windows that are in monitoring using zabbix agent passive. There is a discovery rule to discover services. I have tried to stop it from discovering anything with "GoogleUpdater" in the name by adding to the following macro
{$SERVICE.NAME.NOT_MATCHES}

^(?:RemoteRegistry|MMCSS|gupdate|SysmonLog|clr_opt imization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel\(R\) TPM Provisioning Service|dbupdate|DoSvc|CDPUserSvc_.+|WpnUserServic e_.+|OneSyncSvc_.+|WbioSrvc|BITS|tiledatamodelsvc| GISvc|ShellHWDetection|TrustedInstaller|TabletInpu tService|CDPSvc|wuauserv|GoogleUpdater*)$

I added GoogleUpdater* however the discovery still picks up these services.

is there a way to stop google updater service from being added to monitoring because it is generating alerts about something no one cares about.

[cyber]

"a* Matches zero or more consecutive `a` characters."
So you are looking for services that are named either GoogleUpdate or GoogleUpdater or GoogleUpdaterrrrrrrr. Insert as many r-s here as you wish. You should use "GoogleUpdater.*" to match everything that starts with "GoogleUpdater" and is followed by whatever...