trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

More Exchange related code

Browse Source
This commit is contained in:
Chris Long
2021-03-29 20:45:43 -07:00
parent 280017ed2c
commit bf502e85c9
1 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
Vagrant/resources/splunk_forwarder/exchange_inputs.conf Normal file
View File

@@ -0,0 +1,23 @@
[monitor://C:\Program Files\Microsoft\Exchange Server\V15\Logging\Ews]
whitelist=\.log$|\.LOG$
sourcetype=MSWindows:2016EWS:IIS
queue=parsingQueue
index=msexchange
disabled=false
initCrcLength=8192
[monitor://C:\inetpub\logs\LogFiles\W3SVC1]
whitelist=\.log$|\.LOG$
sourcetype=MSWindows:IIS
queue=parsingQueue
index=msexchange
disabled=false
initCrcLength=8192
[monitor://C:\inetpub\logs\LogFiles\W3SVC2]
whitelist=\.log$|\.LOG$
sourcetype=MSWindows:IIS
queue=parsingQueue
index=msexchange
disabled=false
initCrcLength=8192