Regular Expressions in PCRE Format

A regular expression represents a pattern-matching rule for identifying content in a file. Several types of controls require users to enter one or more regular expressions when setting the default expected value for a control. The default expected value may be set when creating user-defined controls and when editing control values in a compliance policy. Users must also enter a regular expression when defining the scan parameters for a user defined Unix File Content Check.

PCRE Standard

The PC application implements Perl Compatible Regular Expressions (PCRE) following the PCRE standard. For information on this standard, go to http://www.pcre.org/. For information on building proper regular expressions for controls using this standard, go to http://perldoc.perl.org/perlre.html. Note that users should escape special characters in PCRE regular expressions for string matching to occur correctly:

( ) [ ] | ^ $ -

For example, to match the string "(cs" you must enter "\(cs" (add backslash before the special character).

Regular Expression Symbols

Here is a quick reference to standard regular expression symbols and their meanings.

Symbol

Name

Description

\

backslash

Turn off the special meaning of the next character, as in \^.

.

period

Match a single character of any value, except end of line.

^

carat

Match the start of the line, as in ^A.

$

dollar sign

Match the end of the line, as in A$.

|

pipe

Match either the regular expression preceding it or the regular expression following it.

[]

square brackets

Match any single character from within the bracketed list, as in [abcde]. Use a hyphen (-) for a range, as in [0-9]. Within square brackets, most characters are interpreted literally.

[^]

carat enclosed in square brackets

Match any single character except those within the bracketed list, as in [^0-9].

()

parentheses

Group one or more regular expressions to establish a logical regular expression consisting of sub-regular expressions. Used to override the standard precedence of specific operators.

!

exclamation point

Do not match the next character or regular expression.

?

question mark

Match 0 or 1 time.

*

asterisk

Match 0 or more times.

+

plus

Match 1 or more times.

{n}

n enclosed in braces

Match exactly n times.

{n,}

n, enclosed in braces

Match n or more times.

{,n}

,n enclosed in braces

Match n or fewer times.

{n,m}

n,m enclosed in braces

Match at least n times but not more than m times.