Skip to main content
Version: 10.2

Include or Exclude Applications

The include-exclude.conf file serves as a general configuration file for including and excluding applications in data collection. This affects freeze, appusage, module, and process data collection. To do this, follow these steps:

  1. Open the include-exclude.conf file in the Configuration directory, which is by default in C:\Program Files\OpeniT\Core\Configuration. Notice the written instructions for proper configuration.

    include-exclude.conf
    # Include

    # The following will include everything
    include after=1970-01-01


    # Exclude Windows Core Applications
    exclude exe=*windows\system32*
    exclude exe=*windows\syswow64*
    exclude exe=*conhost*
    exclude exe=*consent*
    exclude exe=*svchost*
    exclude exe=*windowsapps\microsoft*

    Use the following format for each entry:

    Format
    <use_key> <key>=<key_value>

    • <use_key> - Any of include or exclude depending on the purpose of the entry.

    • <key> - Any of the acceptable keys depending on the purpose of the entry. Use the following descriptions for proper configuration.

    • <key_value> - A valid value corresponding to the key provided.

    KeyDescription
    beforeUse this to filter the data before the provided date. This supports the date and time format: yyyy-mm-dd[T:hh:mm:ss].
    afterUse this to filter the data after the provided date. This supports the date and time format: yyyy-mm-dd[T:hh:mm:ss].
    wdaysUse this to filter the data using week days. (mon,tue,wed,thu,fri,sat,sun)
    before-todUse this to filter the data before the provided time of the day. This supports the following format: hh:mm:ss.
    after-todUse this to filter the data after the provided time of the day. This supports the following format: hh:mm:ss.
    datatypeUsed to filter data using data type names. The values can be: This allows globbing.
    userUse this to filter the data using username. This allows globbing.
    groupUse this to filer the data using group name. This allows globbing.
    projectUse this to filter the data using project name. This allows globbing.
    exeUse this to filter the data using application executable name. This allows globbing.
    appUse this to filter the data using the application name. This allows globing.
    hostUse this to filter the data using the host name. This allows globbing.
    osUse this to filter the data using the operating system name. This allows globbing.
    platformUse this to filter the data using the platform name. This allows globbing.
    domainUse this to filter the data using the domain or workgroup name. This allows globbing.
    cpuUse this to filter the data using the provided CPU utilization. The data should be greater than or equal to the value.
    ioUse this to filter the data using the provided I/O bytes/sec utilization. The data should be greater than or equal to the value.
    durationUse this to filter the data using the provided duration. The data should be greater than or equal to the value.
    Available Include Exclude Keys

  2. Add new lines for new entries.

    note

    Specify general, followed by specific elements. Entries are processed sequentially, starting from the top.

    Example: include-exclude.conf
    # The following will include everything until 2010-01-01
    include after=1970-01-01
    exclude after=2010-01-01

    include exe=*explorer*

    This includes the data from 1970-01-01 until 2010-01-01 and executable names containing explorer.

  3. Save the changes.