From f0a7b1481f0c3d4f770ddf7677ca5ada93a9a9a9 Mon Sep 17 00:00:00 2001 From: Chris Long Date: Sat, 2 May 2020 22:21:24 -0700 Subject: [PATCH] Typo --- Vagrant/resources/splunk_server/transforms.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Vagrant/resources/splunk_server/transforms.conf b/Vagrant/resources/splunk_server/transforms.conf index abdd80a..e88932a 100644 --- a/Vagrant/resources/splunk_server/transforms.conf +++ b/Vagrant/resources/splunk_server/transforms.conf @@ -20,7 +20,7 @@ DEST_KEY = queue FORMAT = nullQueue [osqueryd_wineventlog_null] -REGEX = "Process\sName:\s+C:\\Program Files\\osquery\\osqueryd\\osqueryd.exe"" +REGEX = "Process\sName:\s+C:\\Program Files\\osquery\\osqueryd\\osqueryd.exe" DEST_KEY = queue FORMAT = nullQueue