From f0a005f14009ebfdcfe62c0f4dea86c6896bbd69 Mon Sep 17 00:00:00 2001 From: rfaircloth-splunk Date: Tue, 9 Jun 2020 15:40:57 -0400 Subject: [PATCH] Fix vmauthd and add iofiltervpd for vmware esx --- package/etc/conf.d/filters/VMware/vsphere.conf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/package/etc/conf.d/filters/VMware/vsphere.conf b/package/etc/conf.d/filters/VMware/vsphere.conf index ac5c1ca..553de54 100644 --- a/package/etc/conf.d/filters/VMware/vsphere.conf +++ b/package/etc/conf.d/filters/VMware/vsphere.conf @@ -5,6 +5,7 @@ filter f_vmware_all { or program("Fdm", flags(ignore-case)) or program("Hostd", flags(ignore-case)) or program("hostd-probe", flags(ignore-case)) + or program("iofiltervpd", flags(ignore-case)) or program("indcfg", flags(ignore-case)) or program("lwsmd", flags(ignore-case)) or program("netcpa", flags(ignore-case)) @@ -13,7 +14,8 @@ filter f_vmware_all { or program("sdrsInjector", flags(ignore-case)) or program("sfcb-.*", flags(ignore-case)) or program("storageRM", flags(ignore-case)) - or program("updatemgr", flags(ignore-case)) + or program("updatemgr", flags(ignore-case)) + or program("vmauthd", flags(ignore-case)) or program("vmafdd", flags(ignore-case)) or program("vmcad", flags(ignore-case)) or program("vmdird", flags(ignore-case)) @@ -39,6 +41,7 @@ filter f_vmware_esx { or program("Hostd", flags(ignore-case)) or program("hostd-probe", flags(ignore-case)) or program("indcfg", flags(ignore-case)) + or program("iofiltervpd", flags(ignore-case)) or program("lwsmd", flags(ignore-case)) or program("netcpa", flags(ignore-case)) or program("pktcap-agent", flags(ignore-case))