---
updatedAt: 2026-01-05T23:40:05.000Z
---

# Appends applications to an existing list of excluded applications.

Appends applications to an existing list of excluded applications. **In order for your changes to take effect, please make a request to the RestartServices route with no request body.**

# OpenAPI definition

```json
{
  "openapi": "3.0.0",
  "info": {
    "title": "LogRhythm Network Monitor API",
    "version": "v1",
    "description": "Network Monitor REST API communicates over HTTPS using JSON. The available routes and methods can be used to get session information, general appliance information, capture configurations, as well as download PCAPs and reconstructed file attachments. API requests will be done on behalf of an API account, identified by the API token passed in with each request. **The base URL (/api) should be prefixed to each API path below.**"
  },
  "paths": {
    "/services/capture/actions/addExcludedApplications": {
      "put": {
        "operationId": "addExcludedApplications",
        "summary": "Appends applications to an existing list of excluded applications.",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "description": "Appends applications to an existing list of excluded applications. **In order for your changes to take effect, please make a request to the RestartServices route with no request body.**",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/AddExcludedApplications"
              }
            }
          },
          "description": "List of applications to add to the exclude list.",
          "required": true
        },
        "responses": {
          "200": {
            "description": "The current capture configuration is returned.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/CaptureConfiguration"
                }
              }
            }
          },
          "default": {
            "description": "In case of an error, an error payload containing error code, name, and description is returned.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorObject"
                }
              }
            }
          }
        }
      }
    }
  },
  "servers": [
    {
      "url": "https://localhost:3000/api"
    }
  ],
  "components": {
    "securitySchemes": {
      "bearerAuth": {
        "type": "oauth2",
        "description": "API requests are authenticated using HTTP Bearer Authorization. The Token is generated that user, which can be found in the API Token panel that appears at the top of the User tab under the Configuration top navigation option. Certain routes may be restricted to the admin user.",
        "flows": {
          "implicit": {
            "authorizationUrl": "localhost:3000",
            "scopes": {}
          }
        }
      }
    },
    "schemas": {
      "AddExcludedApplications": {
        "type": "object",
        "properties": {
          "addToExcludeList": {
            "type": "array",
            "description": "List of applications to add to the exclude list when Capture All is turned ON.",
            "items": {
              "type": "string"
            }
          }
        }
      },
      "CaptureConfiguration": {
        "type": "object",
        "properties": {
          "captureAll": {
            "type": "boolean",
            "description": "Returns true/false based on whether Capture All is turned ON/OFF."
          },
          "capturedApplications": {
            "type": "array",
            "description": "Returns a list of applications that are captured when Capture All is turned ON.",
            "items": {
              "type": "string"
            }
          },
          "excludedApplications": {
            "type": "array",
            "description": "Returns a list of white-listed applications that are captured when Capture All is turned OFF.",
            "items": {
              "type": "string"
            }
          }
        }
      },
      "ErrorObject": {
        "properties": {
          "statusCode": {
            "type": "integer",
            "description": "HTTP status code associated with the error."
          },
          "name": {
            "type": "string",
            "description": "HTTP message associated with the HTTP status code."
          },
          "message": {
            "type": "string",
            "description": "Description of the error returned by Network Monitor. This field can contain one or more error messages."
          }
        }
      }
    }
  }
}
```