Adding File and Folder Exclusions to Selected Host Sets

Prev Next

To add file and folder exclusions to real-time event monitoring for selected host sets:

Note

NOTE: See Creating a Custom Policy for more information about using the Web UI to create a custom policy.

  1. Log in to the Web UI as an administrator.

  2. From the Admin menu, select Policies to access the Policies page.

  3. From the Policies table, select the link for the custom policy you want to modify.

  4. Select the Real-Time Indicator Detection tab.

  5. Verify that the Real-Time Indicator Detection ON/OFF switch is set to ON.

  6. From the Exclude Files and Folders section, enter the name of a file or folder you want to exclude from real-time event monitoring in the Exclude files or folders from Real-Time Indicator Detection field. File and folder exclusions apply to file write events only. See Real-Time Detection Exclusion Guidelines for additional guidelines.

    Policy_RTID_FF_Exclusions.png
  7. Click Add.

  8. Click Save.

Now you can assign host sets to the custom policy and set the policy priority level. See Assigning Host Sets to Agent Policies and Configuring Policy Priority Using the Web UI for more information.