From 9b42842d4feda8e2caf1308d7306242d1972b5d8 Mon Sep 17 00:00:00 2001
From: drewadwade <32397380+drewadwade@users.noreply.github.com>
Date: Tue, 19 Mar 2019 20:55:46 -0400
Subject: [PATCH] Fixed unclosed quotes on regexp for 0052 - LiveUpdate Manager

---
 alienvault-plugins/d_clean/plugins/symantec-epm.cfg | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/alienvault-plugins/d_clean/plugins/symantec-epm.cfg b/alienvault-plugins/d_clean/plugins/symantec-epm.cfg
index d7d3d330..165ccaed 100644
--- a/alienvault-plugins/d_clean/plugins/symantec-epm.cfg
+++ b/alienvault-plugins/d_clean/plugins/symantec-epm.cfg
@@ -802,7 +802,7 @@ userdata4={$8}
 [0052 - Symantec EPM - LiveUpdate Manager]
 event_type=event
 precheck="LiveUpdate"
-regexp="(\S+\s+\d+\s+\d+:\d+:\d+)\s+(\S+)\s+(\S+):\s+(\S+),Category:\s+2,LiveUpdate\s+Manager,(.*?success.*)
+regexp="(\S+\s+\d+\s+\d+:\d+:\d+)\s+(\S+)\s+(\S+):\s+(\S+),Category:\s+2,LiveUpdate\s+Manager,(.*?success.*)"
 plugin_sid=83
 device={resolv($3)}
 date={normalize_date($1)}