Unable to make regex work in compliance reports

Question

Hello all,

I'm trying to parse a line out of a config for compliance purposes. Testing through Regex101.com works great, but SW seems to have a different interpreter.

This is a snip of the full config (see link below). I'm trying to ensure "login authentication" appears in the block with the following expression: (?<=^line con \d
)((^\s+[^l][^
]+
)*)(^\s+login authentication[^
]*
)

!

line con 0

exec-timeout 30 0

password 7 xxxxxxxxxxxxxxxx

login authentication metscheme

transport output none

line vty 0 4

Online regex tester and debugger: PHP, PCRE, Python, Golang and JavaScript

This fails compliance every time. Any ideas how to make it work?

Thank you

tdavidson1 · Answer

Thank you for the response.

How are you testing the rule? If I run the test and paste the entire device config into the test block, it works. However, if I select the running config from the device (exact same config), it fails. Weird.

This has got to be a bug of some kind. I've already opened a support case, so hopefully they can figure it out.

Thank you for looking at this...

rfroembgen · Answer

Hi there,

thats interesting. I just tested your Regex with the config you posted within a compliance rule and it was working. I did not test it with a complete compliance-report, but within a rule it was working.

Here is the setup:

Does not trigger if block is present, does trigger if i delete it from the test-config.

Best Regards

Rene