[Aide] question about dealing with expected files

[Smith, Cathy]

Hi

I have a question about dealing with expected files in the /var/log directory.   Is there a way to exclude files such as those in /var/log/sa that are normally added/dropped daily?   I'm running Red Hat's RHEL6.2 distribution of aide, aide-0.14.3.  I've tried just to have aide ignore them, but the files are still listed under the daily added and dropped sections of the log:
        /var/log/sa NORMAL
        !/var/log/sa/sa[0-9][0-9]$
        !/var/log/sa/sar[0-9][0-9]$

Thank you


Regards,


Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:      509.375.2687
Fax:        509.375.2330
Email:      cathy.smith at pnnl.gov



-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.cs.tut.fi/pipermail/aide/attachments/20130318/0b8774f3/attachment.html