20 lines
808 B
20 lines
808 B
# Version 9.2.2.20240415
|
|
#
|
|
# This is an example eventdiscoverer.conf. These settings are used to control
|
|
# the discovery of common eventtypes used by the typelearner search command.
|
|
#
|
|
# To use one or more of these configurations, copy the configuration block into
|
|
# eventdiscoverer.conf in $SPLUNK_HOME/etc/system/local/. You must restart
|
|
# Splunk to enable configurations.
|
|
#
|
|
# To learn more about configuration files (including precedence) please see the
|
|
# documentation located at
|
|
# http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutconfigurationfiles
|
|
|
|
|
|
# Terms in this list are never considered for defining an eventtype.
|
|
ignored_keywords = foo, bar, application, kate, charlie
|
|
|
|
# Fields in this list are never considered for defining an eventtype.
|
|
ignored_fields = pid, others, directory
|