Event Forwarder Config file location

Products

• Carbon Black EDR

Issue/Introduction

The Event Forwarder configuration file location for changes and troubleshooting

Environment

• Carbon Black EDR Server: Supported Versions
• Event Forwarder: Supported Versions

Resolution

 The default file location for the CB Event Forwarder configuration: 

/etc/cb/integrations/event-forwarder/cb-event-forwarder.conf

Additional Information

• The Event Forwarder generally only runs on the Primary EDR server or on an external host. It is generally not run on secondaries.
• The file can be found in a server's cbdiag in ./etc/cb/integrations/event-forwarder/cb-event-forwarder.conf