To add file and folder exclusions to real-time event monitoring for all of your host endpoints:
Caution
On macOS, the total number of all file and folder exclusions must not exceed 100. The agent will ignore additional entries.
Log in to the Web UI as an administrator.
From the Admin menu, select Policies to access the Policies page.
From the Policies table, select the Agent Default Policy and click the policy link to access the Edit Policy page.
Select the Real-Time Indicator Detection tab.
Verify that the Real-Time Indicator Detection ON/OFF switch is set to ON.
From the Exclude Files and Folders section, enter the name of a file or folder you want to exclude from real-time event monitoring in the Exclude files or folders from Real-Time Indicator Detection field. File and folder exclusions apply to file write events only. See Real-Time Detection Exclusion Guidelines for additional guidelines.
.png "Policy_RTID_FF_Exclusions.png")
Click Add.
Click Save.