Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Eliminate .tmp and ~$ with filter?

$
0
0

Hi Curtisi

 

Thank you for the reply. I have removed the exists part of the filter:

 

FileDelete.FileName /= (does not equal) *.tmp *~$  OR

 

FileCreate.FileName /= (does not equal) *.tmp *~$  OR       OR (overall)

 

FileDataWrite.FileName /= (does not equal) *.tmp *~$  OR

 

However, these events are still occurring.

 

Thanks


Viewing all articles
Browse latest Browse all 5385

Trending Articles