Files
DetectionLab/Vagrant/resources/splunk_forwarder/exchange_inputs.conf
2021-03-29 20:45:43 -07:00

23 lines
525 B
Plaintext

[monitor://C:\Program Files\Microsoft\Exchange Server\V15\Logging\Ews]
whitelist=\.log$|\.LOG$
sourcetype=MSWindows:2016EWS:IIS
queue=parsingQueue
index=msexchange
disabled=false
initCrcLength=8192
[monitor://C:\inetpub\logs\LogFiles\W3SVC1]
whitelist=\.log$|\.LOG$
sourcetype=MSWindows:IIS
queue=parsingQueue
index=msexchange
disabled=false
initCrcLength=8192
[monitor://C:\inetpub\logs\LogFiles\W3SVC2]
whitelist=\.log$|\.LOG$
sourcetype=MSWindows:IIS
queue=parsingQueue
index=msexchange
disabled=false
initCrcLength=8192