mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
divious1
14 lines
354 B
Plaintext
14 lines
354 B
Plaintext
[kvstore_process_length]
|
|
field.process_name = string
|
|
field.dest = string
|
|
field.length = number
|
|
field.stddev = number
|
|
accelerated_fields.my_acceleration = {"process_name": 1, "dest": 1}
|
|
|
|
[kvstore_process_path]
|
|
field.process_name = string
|
|
field.dest = string
|
|
field.process_path = string
|
|
accelerated_fields.my_acceleration = {"process_name": 1, "dest": 1}
|
|
|