Getting Data In

Splunk Blacklist inputs.conf for desktopexentsion.exe assistance

EiffelPalace
Engager

Trying to blacklist an event that is generating a lot of logs.

Previously asked this question here Solved: Re: Splunk Blacklist DesktopExtension.exe addition... - Splunk Community but the solution is not working.

Any other thoughts on how to blacklist Desktopextension.exe for windows security events. 

 

 

blacklist = EventCode=4673 message="DesktopExtension\.exe

 

 

 

 

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...