Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: What frequency will the Data Forwarder write to S3 Buckets?

Carbon Black Cloud: What frequency will the Data Forwarder write to S3 Buckets?

Environment

  • Carbon Black Cloud
  • CB Cloud Data Forwarder
  • Amazon Simple Storage Service (Amazon S3)

Question

What frequency will the Data Forwarder write to S3 Buckets?

Answer

  • Alerts
    • 100 MB (uncompressed) or 30 seconds, whichever comes first (and it's almost always the 30 second timer)
  • Events
    • 100 MB (uncompressed) or 5 minutes, whichever comes first

Additional Notes

  • The files are written in the following format, with the timestamp being when the files were written to the S3 Bucket:
org_key=ABCD1234/year=2019/month=8/day=27/hour=12/minute=36/second=53/ac203140-f0e2-48fe-90cf-05eb7289f628.jsonl.gz

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-26-2021
Views:
270