This parameter determines whether exact file paths are returned in Solr searches.

When searching process events in Solr, Carbon Black EDR allows searching file path keywords in the search query.

For example, while searching for filemod:/etc/abc, processes with filemod /etc/abc together with processes having filemod /test/etc/abc are returned.

Upon enabling the flag SolrFilepathExactMatchEnabled=True, only the exact file path is returned.

Default: False

Note:
  • New in version 7.8.0
  • This setting is only applicable for path, filemod, regmod and modload.