×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
EiffelPalace
Engager
Member since: ‎08-31-2023
‎03-19-2024
Community Statistics
Posts 3
Solutions 0
Karma Given 5
Karma Received 0
Member Since ‎08-31-2023
View All

Splunk Blacklist inputs.conf for desktopexentsion....

by in Getting Data In
‎02-22-2024 09:24 AM
‎02-22-2024 09:24 AM
Trying to blacklist an event that is generating a lot of logs. Previously asked this question here Solved: Re: Splunk Blacklist DesktopExtension.exe addition... - Splunk Community but the solution is not working. Any other thoughts on how to blacklist Desktopextension.exe for windows security events.      blacklist = EventCode=4673 message="DesktopExtension\.exe         ... View more

Re: Splunk Blacklist DesktopExtension.exe addition...

by SplunkTrust in Getting Data In
‎01-03-2024 08:21 AM
1 Karma
‎01-03-2024 08:21 AM
1 Karma
Yes, that should work. blacklist = EventCode=4673 message="DesktopExtension\.exe" ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎03-19-2024 05:50 PM
Karma given to
View All