Files
splunk-security_content/macros/linux_shells.yml
T
2021-12-13 11:54:59 -07:00

4 lines
310 B
YAML

definition: (Processes.process_name IN ("sh", "ksh", "zsh", "bash", "dash", "rbash", "fish", "csh', "tcsh', "ion", "eshell"))
description: customer specific splunk configurations(eg- index, source, sourcetype).
Replace the macro definition with configurations for your Splunk Environmnent.
name: linux_shells