Windows Event Size Reducer

Tech Talks: Technical Deep Dives
Find insightful and valuable deep-dives for any technical practitioner

Windows Event Size Reducer

Windows Event Size Reducer
Archived
This add-on strips the repeated text from certain windows events, this leads to a reduction in license consumption, and disk usage by zero value repeated content within these security events. It works with the Splunk supplied Windows TA and is designed to reduce the event size while maintaining the content that makes the event CIM compliance for apps like Enterprise Security, PCI Compliance or IT Service Intelligence. There is also a convenient dashboard included to allow you to recognise the benefits. It is currently known to work with the following eventcodes: 4624, 4625, 4626, 4634, 4688, 4769
0 topics and 0 replies mentioned Windows Event Size Reducer in View all 0
Latest Topics
No posts to display.
Latest Replies
No posts to display.
Top Topics
No posts to display.
My Topics
No posts to display.