Getting Data In

Update sysmon config

splunkfrs
New Member

Newbie question - rolled out sysmon along with UF but need to edit the sysmon config file to exclude Splunk processes.  Can this be done through the Deployment Server?

Labels (1)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.