Applies to FileEventInclusionPaths and FileEventExclusionPaths preference fields.
Evaluation for regular expressions start from the beginning of the file path and must have a contiguous regular expression match for an event to be logged. Normal searching is case-insensitive when matching.
Note: Forward slashes and spaces in file paths should not be escaped when defining inclusion paths in the preference file.
To Enable Normal-mode Regex Filtering
Normal-mode Example: Regex Matching
FileEventInclusionPaths defined in plist
<key>FileEventInclusionPaths</key> <array> <string>Doc</string> <string>.*\.app</string> <string>/Library/Preferences/.*</string> </array> </key>
The above inclusion path filters will match the bold file paths and log any events from those folders.
/Users/joe/Documents/big text document.pdf