cancel
Showing results for 
Search instead for 
Did you mean: 

Removing "$" from a search

Jump to solution

Hello,

I'm attempting to remove the service accounts from a dashboard/report filter. I hope someone knows how to do this! I tried clicking the "!" and input $ and "$" but it doesn't remove service accounts (domain controllers) from my data.

Thanks!

2 Solutions

Accepted Solutions

Re: Removing "$" from a search

Jump to solution

FWIW if anyone else is having this issue use:

 

"contains($)" in your filter

Highlighted

Re: Removing "$" from a search

Jump to solution

hi,

there is a KB.

How to filter the SIEM for users ending in a dollar ($) sign

https://kb.mcafee.com/agent/index?page=content&id=KB77102

 

😄

2 Replies

Re: Removing "$" from a search

Jump to solution

FWIW if anyone else is having this issue use:

 

"contains($)" in your filter

Highlighted

Re: Removing "$" from a search

Jump to solution

hi,

there is a KB.

How to filter the SIEM for users ending in a dollar ($) sign

https://kb.mcafee.com/agent/index?page=content&id=KB77102

 

😄

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator