Files
splunk-security_content/macros/wineventlog_application.yml
2022-09-12 08:53:24 -06:00

4 lines
280 B
YAML

definition: eventtype=wineventlog_application OR source="XmlWinEventLog:Application"
description: customer specific splunk configurations(eg- index, source, sourcetype).
Replace the macro definition with configurations for your Splunk Environmnent.
name: wineventlog_application