Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Environment

Cb Response: 6.x and Higher

Question

Can you forward feed information to a SIEM using the Cb-Event-Forwarder while excluding a specific feed?

Answer

At this point in time you can only send all or no feed information with the Cb-Event-Forwarder
If you would like the option to exclude sending specific feed information you can upvote the idea in the related content

Knowledge Base

Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?

Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?

Environment

Question

Answer

Related Content

EDR

Knowledge Base

Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?

Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?

Environment

Question

Answer

Related Content

EDR

Thank you for your feedback.

Thank you for your feedback.