Skip to main content

vast limits GmbH and uberAgent are now part of Citrix, a business unit of Cloud Software Group. Learn more at

This documentation does not apply to the most recent version of uberAgent. Click here for the latest version.


The following is the uberAgent-eventdata-filter-vastlimits-macOS.conf configuration file that ships with uberAgent. It contains eventdata filter rules for macOS curated by vast limits.

# Exclude processes whose name is exactly one of the given names.
Action = deny
Sourcetype = Process:ProcessStartup
Query = ProcName in ["AppleQEMUGuestAgent", "mdworker_shared", "sleep"]


Your email address will not be published. Required fields are marked *