diff --git a/alienvault-plugins/d_clean/plugins/symantec-epm.cfg b/alienvault-plugins/d_clean/plugins/symantec-epm.cfg
index d7d3d330..165ccaed 100644
--- a/alienvault-plugins/d_clean/plugins/symantec-epm.cfg
+++ b/alienvault-plugins/d_clean/plugins/symantec-epm.cfg
@@ -802,7 +802,7 @@ userdata4={$8}
 [0052 - Symantec EPM - LiveUpdate Manager]
 event_type=event
 precheck="LiveUpdate"
-regexp="(\S+\s+\d+\s+\d+:\d+:\d+)\s+(\S+)\s+(\S+):\s+(\S+),Category:\s+2,LiveUpdate\s+Manager,(.*?success.*)
+regexp="(\S+\s+\d+\s+\d+:\d+:\d+)\s+(\S+)\s+(\S+):\s+(\S+),Category:\s+2,LiveUpdate\s+Manager,(.*?success.*)"
 plugin_sid=83
 device={resolv($3)}
 date={normalize_date($1)}