I'm attempting to remove the service accounts from a dashboard/report filter. I hope someone knows how to do this! I tried clicking the "!" and input $ and "$" but it doesn't remove service accounts (domain controllers) from my data.
Go to Solution.
FWIW if anyone else is having this issue use:
"contains($)" in your filter
there is a KB.
How to filter the SIEM for users ending in a dollar ($) sign
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center
2821 Mission College Blvd.
Santa Clara, CA 95054 USA
Consumer Support | Enterprise Support | McAfee.com
Legal | Privacy | Copyright © 2019 McAfee, LLC