AzStackHciStandaloneObservability/package/bin/GMA/Monitoring/Agent/initconfig/2.0/Standard/AzSecMdsAntimalware.xml
|
<?xml version="1.0" encoding="utf-8"?>
<MonitoringManagement version="1.0" timestamp="2022-09-09T18:03:54.8774890Z"> <!-- Autogenerated version comment - DO NOT REMOVE: AzSecPackShipVersion=4.22.0.2 --> <Imports> <Import file="AzSecMdsAntimalwareOffline.xml" forceLocal="true" /> </Imports> <Events> <EventDeclarations storeType="CentralBond"> <!-- Events that are already known to the team --> <Declaration eventName="AsmSysAV" account="AzSecurityStore" /> <!-- Create a few more entries for reserved columns--> <Declaration eventName="AsmSysAVInv" account="AzSecurityStore" /> <Declaration eventName="AsmSysAVAL" account="AzSecurityStore" /> </EventDeclarations> <FileMonitors> <FileWatchItem eventName="AsmSysAvFMEvent" account="AzSecurityStore" storeType="CentralBond" container="azsecsysavfm" /> </FileMonitors> </Events> <EventStreamingAnnotations> <EventStreamingAnnotation name="^AsmSysAV$"> <Cosmos> <Content><![CDATA[<Config />]]></Content> </Cosmos> </EventStreamingAnnotation> <EventStreamingAnnotation name="^AsmSysAVInv$"> <Cosmos> <Content><![CDATA[<Config />]]></Content> </Cosmos> </EventStreamingAnnotation> </EventStreamingAnnotations> </MonitoringManagement> |