trinitor/DetectionLab
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update transforms.conf

Browse Source
This commit is contained in:
Chris Long authored and GitHub committed 2020-06-01 21:46:22 -07:00
1 parent da366bcce6
commit c55b3d6def
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
Vagrant/resources/splunk_server/transforms.conf
+2 -2
View File
@@ -14,8 +14,8 @@ DEST_KEY = MetaData:Host
REGEX = hostIdentifier\"\:\"([^\"]+)\" REGEX = hostIdentifier\"\:\"([^\"]+)\"
FORMAT = host::$1 FORMAT = host::$1
[setnull] [osquery_status_filter]
REGEX = Error\scasting REGEX = (POST\srequest\sto\sURI|Refreshing\sconfiguration|not\sattaching|Executing\sscheduled\squery|Error\scasting)
DEST_KEY = queue DEST_KEY = queue
FORMAT = nullQueue FORMAT = nullQueue