You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/linux-exclusions.md
+47-1Lines changed: 47 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -88,7 +88,53 @@ For antivirus exclusions, when using the * wildcard at the end of the path, it w
88
88
89
89
### Using the management console
90
90
91
-
For more information on how to configure exclusions from Puppet, Ansible, or another management console, see [Set preferences for Defender for Endpoint on Linux](linux-preferences.md).
91
+
To configure exclusions from Puppet, Ansible, or another management console, please refer to the following sample `mdatp_managed.json`.
92
+
```JSON
93
+
{
94
+
"exclusionSettings":{
95
+
"exclusions":[
96
+
{
97
+
"$type":"excludedPath",
98
+
"isDirectory":true,
99
+
"path":"/home/*/git<EXAMPLE DO NOT USE>",
100
+
"scopes": [
101
+
"epp"
102
+
]
103
+
},
104
+
{
105
+
"$type":"excludedPath",
106
+
"isDirectory":true,
107
+
"path":"/run<EXAMPLE DO NOT USE>",
108
+
"scopes": [
109
+
"global"
110
+
]
111
+
},
112
+
{
113
+
"$type":"excludedPath",
114
+
"isDirectory":false,
115
+
"path":"/var/log/system.log<EXAMPLE DO NOT USE><EXCLUDED IN ALL SCENARIOS>",
116
+
"scopes": [
117
+
"epp", "global"
118
+
]
119
+
},
120
+
{
121
+
"$type":"excludedFileExtension",
122
+
"extension":".pdf<EXAMPLE DO NOT USE>",
123
+
"scopes": [
124
+
"epp"
125
+
]
126
+
},
127
+
{
128
+
"$type":"excludedFileName",
129
+
"name":"/bin/cat<EXAMPLE DO NOT USE><NO SCOPE PROVIDED - GLOBAL CONSIDERED>"
130
+
}
131
+
],
132
+
"mergePolicy":"admin_only"
133
+
}
134
+
}
135
+
```
136
+
137
+
For more information, see [Set preferences for Defender for Endpoint on Linux](linux-preferences.md).
0 commit comments