MacOS and Linux Event Reporting and Sensor Operation Exclusions

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

Does Carbon Black Cloud Support Event Reporting and Sensor Operation Exclusions for MacOS and Linux OS sensors?

Environment

• Carbon Black Cloud Console: Current Version
• Carbon Black Cloud Linux Sensor: 2.16.x and lower
• Carbon Black Cloud MacOS Sensor: 3.8.x and lower
• MacOS: Supported Versions
• Linux OS: Supported Versions

Cause

Mac and Linux sensor feature upgrades are required to support the Event Reporting and Sensor Operation Exclusions functionality and those are not yet released as of October 2025.

Resolution

No, Event Reporting and Sensor Operation Exclusions are not currently supported for Linux sensor 2.16.x and lower or Mac sensors 3.8.x and lower.

Additional Information

Additionally, in the CBC console, the path attribute doesn't accept '/' as a valid character, so all MacOS and Linux paths would be considered invalid.