On my dashboard, I have a graph displaying how many workstations have out of date virus definitions. Several of these workstations are likely sitting on a shelf in the client room waiting to be redeployed. Is there a way to exclude these systems in Splunk for a more accurate virus definitions count? Thank you
Is there a way to identify these system (sitting in client room waiting for redpeloyment)? Do they report Splunk from there? What is the query that you're using in your dashboard?
