Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

EVAL-expression incomplete in TA-microsoft-windefender

$
0
0
It appears that in the "TA-microsoft-windefender"-addon something is missing that causes warnings in the search-log but more important, it does not do what it is supposed to do. The problem is contained in ".../default/props.conf" In line 25 is stated: EVAL-Feature_Name = case(Feature_Name="%%802", Which is obviously an incomplete eval-expression. Does anyone have sorted out how this full line should look like? Thanks!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>