<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AuditLevel</key> <integer>1</integer> <key>LogFileMaxNumberBackups</key> <integer>10</integer> <key>LogFileLocation</key> <string>/var/log/cmdReporter.log</string> <key>LogFileMaxSizeMegaBytes</key> <integer>10</integer> <key>FileEventUseFuzzyMatch</key> <false/> <key>FileEventInclusionPaths</key> <array> <string>/Users/.*</string> </array> <key>FileEventExclusionPaths</key> <array> <string>/Users/.*/Library/.*</string> </array> <key>LogFilePermission</key> <string>640</string> <key>LogFileOwnership</key> <string>root:wheel</string> <key>AuditEventLogVerboseMessages</key> <false/> <key>AuditEventExcludedUsers</key> <array> <string>_spotlight</string> <string>_windowserver</string> </array> <key>AuditEventExcludedProcesses</key> <array> <string>/usr/bin/log</string> <string>/usr/sbin/syslogd</string> </array> <key>LogRemoteEndpointEnabled</key> <true/> <key>LogRemoteEndpointURL</key> <string>server.company.com:PORT</string> <key>LogRemoteEndpointType</key> <string></string> <key>LogRemoteEndpointKafka</key> <dict> <key>TLSServerCertificate</key> <string></string> <key>TLSClientPrivateKey</key> <string></string> <key>TLSClientCertificate</key> <string></string> <key>TopicName</key> <string>cmdReporter</string> </dict> <key>LogRemoteEndpointREST</key> <dict> <key>PublicKeyHash</key> <string>e838SOLK9Yu+brDTxM4s0HatE2UdoEmRSBtNDU=</string> </dict> <key>LogRemoteEndpointTLS</key> <dict> <key>TLSServerCertificate</key> <string></string> </dict> <key>SyslogFormatEnabled</key> <false/> </dict> </plist>