Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?
Article ID: 289306
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Can you forward feed information to a SIEM using the Cb-Event-Forwarder while excluding a specific feed?
Environment
Cb Response: 6.x and Higher
Resolution
- At this point in time you can only send all or no feed information with the Cb-Event-Forwarder
- If you would like the option to exclude sending specific feed information you can upvote the idea in the related content
Feedback
Yes
No
Powered by
