Hi,
Is it possible to whitelist windows service(xyz.EXE) traffic in splunk or should I whitelist user account?