Environment
- Carbon Black Cloud Console
Question
Is it possible to filter events from being forwarded to S3 bucket for Carbon Black Cloud?
Answer
Yes! Event filtering for CBC eventforwarder ia available now as of 09/14/2020
Additional Notes
- Data Filtering is available for forwarders of type “endpoint.event”
- If you want to remove or modify an existing filter then edit the configuration with the desired filter change.
- To remove all filters for a configuration set the filter property to an empty array.
Related Content