Configuration files may include other configuration files, creating a hierarchy. In the default configuration, the hierarchy is as follows:

• uberAgent.conf
  • uberAgent-ESA.conf (on Windows)
    • uberAgent-ESA-am-vastlimits.conf
    • uberAgent-ESA-am-sigma-critical.conf
    • uberAgent-ESA-am-sigma-high.conf
    • uberAgent-ESA-am-sigma-medium.conf (commented out)
    • uberAgent-ESA-am-sigma-low.conf (commented out)
  • uberAgent-eventdata-filter.conf
    • uberAgent-eventdata-filter-vastlimits-Windows.conf (on Windows)
    • uberAgent-eventdata-filter-vastlimits-macOS.conf (on macOS)
    • uberAgent-eventdata-filter-sysmon.conf (on Windows)