Skip to content

Commit 39d4983

Browse files
authored
Merge pull request #1164 from MicrosoftDocs/main
Publish main to live, Friday 10:30AM PDT, 08/16
2 parents cc2acf9 + 877063e commit 39d4983

File tree

1 file changed

+47
-1
lines changed

1 file changed

+47
-1
lines changed

defender-endpoint/linux-exclusions.md

Lines changed: 47 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,53 @@ For antivirus exclusions, when using the * wildcard at the end of the path, it w
8888

8989
### Using the management console
9090

91-
For more information on how to configure exclusions from Puppet, Ansible, or another management console, see [Set preferences for Defender for Endpoint on Linux](linux-preferences.md).
91+
To configure exclusions from Puppet, Ansible, or another management console, please refer to the following sample `mdatp_managed.json`.
92+
```JSON
93+
{
94+
"exclusionSettings":{
95+
"exclusions":[
96+
{
97+
"$type":"excludedPath",
98+
"isDirectory":true,
99+
"path":"/home/*/git<EXAMPLE DO NOT USE>",
100+
"scopes": [
101+
"epp"
102+
]
103+
},
104+
{
105+
"$type":"excludedPath",
106+
"isDirectory":true,
107+
"path":"/run<EXAMPLE DO NOT USE>",
108+
"scopes": [
109+
"global"
110+
]
111+
},
112+
{
113+
"$type":"excludedPath",
114+
"isDirectory":false,
115+
"path":"/var/log/system.log<EXAMPLE DO NOT USE><EXCLUDED IN ALL SCENARIOS>",
116+
"scopes": [
117+
"epp", "global"
118+
]
119+
},
120+
{
121+
"$type":"excludedFileExtension",
122+
"extension":".pdf<EXAMPLE DO NOT USE>",
123+
"scopes": [
124+
"epp"
125+
]
126+
},
127+
{
128+
"$type":"excludedFileName",
129+
"name":"/bin/cat<EXAMPLE DO NOT USE><NO SCOPE PROVIDED - GLOBAL CONSIDERED>"
130+
}
131+
],
132+
"mergePolicy":"admin_only"
133+
}
134+
}
135+
```
136+
137+
For more information, see [Set preferences for Defender for Endpoint on Linux](linux-preferences.md).
92138

93139
### Using the command line
94140

0 commit comments

Comments
 (0)