Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?
search cancel

Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?

book

Article ID: 289306

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can you forward feed information to a SIEM using the Cb-Event-Forwarder while excluding a specific feed? 

Environment

Cb Response: 6.x and Higher

Resolution

  • At this point in time you can only send all or no feed information with the Cb-Event-Forwarder
  • If you would like the option to exclude sending specific feed information you can upvote the idea in the related content