Postfix decoder: Making ending doubled dot optional

wazuh · Aug 23, 2019 · fabda1b · fabda1b
1 parent d7233e5
commit fabda1b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/decoders/0220-postfix_decoders.xml b/decoders/0220-postfix_decoders.xml
@@ -46,6 +46,6 @@
   <use_own_name>true</use_own_name>
   <parent>postfix</parent>
   <prematch>^warning:</prematch>
-  <regex>^warning: (\S+):|warning: Illegal address syntax from unknown[(\S+)]|warning: hostname \S+ does not resolve to address (\S+): </regex>
+  <regex>^warning: (\S+):|warning: Illegal address syntax from unknown[(\S+)]|warning: hostname \S+ does not resolve to address (\S+)</regex>
   <order>srcip</order>
 </decoder>