-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am not sure why your rule is not working, but mine appears to be on a
Sentinel 7.0 SP1 Xen-based-appliance which generates messages that
matches the following very regularly:

filter(((e.EventName match regex (".*DROP.*"))) AND ((e.EventName match
regex (".*kernel.*"))))

My guess is that you should put .* before and after your strings to
allow Java to match the entire string as long as it finds your desired
string somewhere in the middle.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJP0EhFAAoJEF+XTK08PnB5WPwP/i87P8qtYOYSD1ePAfqpbjyq
C2rDjl62Z7iQbC9YCWy+GaJMFk16pdwVuJGnlKtl9yHJLCaOw0 lUvpYHI2ht2Goq
Rl56ZhzUNbgZDAPBfHQTedUUk5miE4qJA+wNrKMTSCaX+3f/Yu03k7WUus5DDKV0
CY5ZdNcHi37ar0h0LpaKtEf4UsN9m9ywZk5eSsON414jDPq9TF 4cE/bBNoxzn+SD
FucHtl9hxESNzW7+IUax8rkdqJi2L4441tZiDoL/3BcJwwrCa5FmLdXcWUHN3zch
F+ZR8bTlIhqRQQtNV0amc90osNyj6vkOnF6fFSrdkajvCxahxK 8jWVWBjKuNlb5+
L5YalPvxKf3KDuMxouXcrLsIlFBd+i/Wn4Mkf5fzPm1HJ/zA7OR5MIG5tcDPYbo4
6xDYvBTbBndl5xZBTkZfvHg4y0oSU2ktOTj7hJfWCfDfG8toUJ U/YMAF3m+jQl+6
FkkYNy6kP0sGjhcRhluiwiEPisZg5sA59ynwntCmiXf35g6tXf 6HdtyfCiem4pTf
WNYCBmJAmqoRwwRDYIRrUXunyHVSdLYE6XTf3l8iODZXNa9O42 JD0uChlSv522UF
kjB6uMvK826kBctQhV8kSnd24XAOnz8OoPtOxb8slDTbrLoRlA FK6mSWqXiXvsDN
TGfsmXDmVNn6JOOeFor4
=5w+X
-----END PGP SIGNATURE-----