Quantcast
Channel: THWACK: Message List
Viewing all articles
Browse latest Browse all 20490

Re: SoftwareInstall Event

$
0
0

I'm new to LEM/SolarWind (2 days old to be precise) so my answer may be riddled with bad practices... In any case, like you, I just discovered that SoftwareInstall events are primarily MSI executables and was not in the least bit satisified ... Here's the rule that I've created to filter out exe runs (generally installs)... as you can see, it will need to be fine-tuned to your environment. Add as many conditions as you need to filter it out properly

 

All it does is display all process starts/stops that are not standard windows processes which start in Program Files, Windows, or the short-hand PROGRA~ directories. Hope it works for you

 

ExeFilter.png


Viewing all articles
Browse latest Browse all 20490

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>