Available filter / condition options when creating Process Classification


Description

When creating process classification following the documentation, you need to add filter conditions to create the best match criteria for the process classification.

The condition options are from cmdb_running_process table.

However not all filter condition will work. For example, "parent" will not work.

Below is a list of available condition options:

-name
-PID
-PPID
-command
-parameters
-listening_on_ports
-connecting_to_ports
-connecting_to
-key_parameters
-classify