search

ZachChristensen28 / TA-crowdstrike-identities

The CrowdStrike Falcon Identity Protection Add-on for Splunk Add-on allows ingestion of the CrowdStrike identity data into Splunk enabling the data to be used with other Splunk Apps, such as Enterprise Security.
https://splunk-ta-crowdstrike.ztsplunker.com/
Other
0 stars 0 forks source link

Exclude specific domains from data ingestion #9

Closed ZachChristensen28 closed 1 year ago

ZachChristensen28 commented 1 year ago

Description

The ability to exclude specific domains from being ingested from the CrowdStrike API would be ideal.

E.x.

Domains to exclude: zachthesplunker.com,ztsplunker.com

Related links

No response

ZachChristensen28 commented 1 year ago

domains: [String!]

domains: ["a", "b", "c"]

or

not: { domains: ["a", "b", "c"] }