From 7aee053352e7bdfad6f8897d98f09ad5acd5a864 Mon Sep 17 00:00:00 2001
From: neu5ron <>
Date: Sat, 25 Jan 2020 10:33:55 -0500
Subject: [PATCH] update finding OTRF images, regex typo

---
 docker/helk_remove_containers.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker/helk_remove_containers.sh b/docker/helk_remove_containers.sh
index 3c23615..3e559f8 100755
--- a/docker/helk_remove_containers.sh
+++ b/docker/helk_remove_containers.sh
@@ -113,7 +113,7 @@ if [ $? -ne 0 ]; then
 fi
 
 echo -e "${CYAN}${HELK_INFO_TAG}${STD} Removing all images..."
-docker rmi "$(docker images -a | awk '{ print $1,$3 }' | grep 'otrf|cyb3rward0g\|helk\|logstash\|kibana\|elasticsearch\|cp-ksql' | awk '{ print $2 }')" >> $LOGFILE 2>&1
+docker rmi "$(docker images -a | awk '{ print $1,$3 }' | grep 'otrf\|cyb3rward0g\|helk\|logstash\|kibana\|elasticsearch\|cp-ksql' | awk '{ print $2 }')" >> $LOGFILE 2>&1
 #TODO: eventually give prompt for removing Elastic/Confluent components as user may be using those for other things on their system
 ERROR=$?
 if [ $ERROR -ne 0 ]; then