Cb Response: Can a Specific Feed be Excluded From Being Forwarded by the Cb-Event-Forwarder?

[#1]

Environment

Cb Response: 6.x and Higher

Question

Can you forward feed information to a SIEM using the Cb-Event-Forwarder while excluding a specific feed? 

Answer

• At this point in time you can only send all or no feed information with the Cb-Event-Forwarder
• If you would like the option to exclude sending specific feed information you can upvote the idea in the related content

Related Content

Add the ability to exclude forwarding specific feeds with the cb-event-forwarder
carbonblack/cb-event-forwarder