You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
135 lines
2.1 KiB
135 lines
2.1 KiB
# Sample inputs.conf for sourcetypes supported by app
|
|
|
|
[WinEventLog://Application]
|
|
disabled = 1
|
|
start_from = oldest
|
|
current_only = 0
|
|
checkpointInterval = 5
|
|
index = wineventlog
|
|
renderXml=true
|
|
|
|
[WinEventLog://Security]
|
|
disabled = 1
|
|
start_from = oldest
|
|
current_only = 0
|
|
evt_resolve_ad_obj = 1
|
|
checkpointInterval = 5
|
|
index = wineventlog
|
|
renderXml=true
|
|
|
|
[WinEventLog://System]
|
|
disabled = 1
|
|
start_from = oldest
|
|
current_only = 0
|
|
checkpointInterval = 5
|
|
index = wineventlog
|
|
renderXml=true
|
|
|
|
[monitor://$WINDIR\System32\DHCP]
|
|
disabled = 0
|
|
whitelist = DhcpSrvLog*
|
|
crcSalt = <SOURCE>
|
|
sourcetype = DhcpSrvLog
|
|
index = windows
|
|
|
|
[monitor://$WINDIR\WindowsUpdate.log]
|
|
disabled = 0
|
|
sourcetype = WindowsUpdateLog
|
|
index = windows
|
|
|
|
[script://.\bin\win_installed_apps.bat]
|
|
disabled = 0
|
|
index = windows
|
|
sourcetype = Script:InstalledApps
|
|
interval = 600
|
|
|
|
[script://.\bin\win_listening_ports.bat]
|
|
disabled = 0
|
|
index = windows
|
|
sourcetype = Script:ListeningPorts
|
|
interval = 3600
|
|
|
|
[script://.\bin\win_timesync_configuration.bat]
|
|
disabled = 0
|
|
index = windows
|
|
sourcetype = Script:TimesyncConfiguration
|
|
|
|
[script://.\bin\win_timesync_status.bat]
|
|
disabled = 0
|
|
index = windows
|
|
sourcetype = Script:TimesyncStatus
|
|
|
|
[perfmon://CPUTime]
|
|
disabled = 0
|
|
index = perfmon
|
|
interval = 600
|
|
|
|
[perfmon://CPU]
|
|
disabled = 0
|
|
index = perfmon
|
|
interval = 600
|
|
|
|
[perfmon://FreeDiskSpace]
|
|
disabled = 0
|
|
index = perfmon
|
|
interval = 600
|
|
|
|
[perfmon://Memory]
|
|
disabled = 0
|
|
index = perfmon
|
|
interval = 600
|
|
|
|
[perfmon://LocalNetwork]
|
|
disabled = 0
|
|
index = perfmon
|
|
interval = 600
|
|
|
|
[perfmon://LogicalDisk]
|
|
counters = *
|
|
disabled = 0
|
|
instances = *
|
|
interval = 10
|
|
object = LogicalDisk
|
|
index = perfmon
|
|
|
|
[perfmon://Process]
|
|
counters = *
|
|
disabled = 0
|
|
instances = *
|
|
interval = 10
|
|
object = Process
|
|
index = perfmon
|
|
|
|
[perfmon://System]
|
|
counters = *
|
|
disabled = 0
|
|
instances = *
|
|
interval = 10
|
|
object = System
|
|
index = perfmon
|
|
|
|
[WinHostMon://os]
|
|
type = operatingSystem
|
|
interval = 86400
|
|
index = windows
|
|
|
|
[WinHostMon://disk]
|
|
type = disk
|
|
interval = 86400
|
|
index = windows
|
|
|
|
[WinHostMon://network]
|
|
type = networkAdapter
|
|
interval = 86400
|
|
index = windows
|
|
|
|
[WinHostMon://service]
|
|
type = service
|
|
interval = 300
|
|
index = windows
|
|
|
|
[WinHostMon://process]
|
|
type = process
|
|
interval = 300
|
|
index = windows
|