Files
splunk-security_content/data_sources/endpoint/Windows_Event_Log_Application.yml
2024-05-22 16:47:39 +00:00

16 lines
603 B
YAML

name: Windows Event Log Application
id: fc387a6f-0706-49d4-b97f-739144767075
author: Patrick Bareiss, Splunk
source: XmlWinEventLog:Application
sourcetype: XmlWinEventLog
separator: EventCode
supported_TA:
name: Splunk Add-on for Microsoft Windows
version: 8.8.0
url: https://splunkbase.splunk.com/app/742
event_names:
- event_name: Windows Event Log Application 2282
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_Application_2282.yml
- event_name: Windows Event Log Application 3000
data_source: data_sources/endpoint/event_sources/Windows_Event_Log_Application_3000.yml