SN System Properties Reference
Property reference

sa.traffic_based_discovery.blacklist

The sa.traffic_based_discovery.blacklist property specifies generic applications that should be excluded from traffic-based discovery. Administrators should review this property to ensure that critical system processes are not inadvertently included in discovery scans.

Default
system32\\(?!w3wp).*.exe|wininit.exe|winlogon.exe|lsass.exe|fsearchctrl.exe|sqlservr.exe
Type
string
Application
Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property defines a list of executable files that are ignored during traffic-based discovery, preventing unnecessary data collection on specific applications.
What area does it affect? Traffic-based discovery
What does the default mean? The default value is "system32\\(?!w3wp).*.exe|wininit.exe|winlogon.exe|lsass.exe|fsearchctrl.exe|sqlservr.exe", which is the baseline setting used unless it is changed.
When should you review it? Review this property when configuring discovery settings or troubleshooting application visibility issues.

Out of the box property record

Raw metadata from the property record.

Property name sa.traffic_based_discovery.blacklist
Sys ID 2b635e007f313100ed1c3b19befa91f9
Type string
Application Global
Default value system32\\(?!w3wp).*.exe|wininit.exe|winlogon.exe|lsass.exe|fsearchctrl.exe|sqlservr.exe
Description Generic apps that should be excluded from traffic based discovery
Updated 2017-02-20 17:27:41

Sources

Official references and nearby text excerpts where this property appears.

More in sa

Other properties in the same namespace.

sa.ssh.exclude_patterns This property specifies a comma-separated list of patterns that SSH will ignore during interactive sessions, i sa.svc_ci_assoc.full_sync_after_n_times This property specifies the number of synchronization events after which a full synchronization of service CI sa.svc_ci_assoc.synchronous_population_enabled This property determines if svc_ci_assoc is updated immediately or through a scheduled job, impacting how quic sa.traffic_based_discovery.active This property controls whether traffic-based discovery is enabled at the product level, impacting how CIs are sa.traffic_based_discovery.ignored_ports It configures the ports that Service Mapping ignores when performing traffic-based discovery, enhancing the ef sa.traffic_based_discovery.max_connections This property limits the number of traffic-based connections from a single CI to enhance the efficiency of the sa.traffic_based_discovery.max_global_rules_per_connection_suggestion It defines the upper limit of global rules checked during traffic-based discovery connections, impacting the e sa.traffic_based_discovery.max_local_rules_per_connection_suggestion It limits the number of local rules checked during traffic-based discovery connections, influencing the effici

All 56 properties in sa →