Update props.conf

2020-06-01 21:47:32 -07:00
parent c55b3d6def
commit 2823f140d2
1 changed files with 2 additions and 2 deletions
--- a/Vagrant/resources/splunk_server/props.conf
+++ b/Vagrant/resources/splunk_server/props.conf
@@ -21,7 +21,7 @@ TIME_FORMAT = %s
 TRUNCATE = 0

 [osquery:status]
-TRANSFORMS-null = setnull
+TRANSFORMS-null = osquery_status_filter

 [WinEventLog]
-TRANSFORMS-null = autoruns_wineventlog_null
+TRANSFORMS-null = autoruns_wineventlog_null