Page Comparison

Table of Contents

minLevel	2
maxLevel	2
minLeveloutline	2false
type	flat
separator	brackets
printable	false

Introduction

The tags beginning with cef0.bit9CarbonblackJson identify events in CEF format generated by Barracuda Carbon Black Bit9 Security Platform.

Tag structure

Events in CEF format don't have a specific tag structure, as explained in Technologies supported in CEF syslog format. They are always sent to a table with the structure cef0.deviceVendor.deviceProduct.

...

cef0.bit9CarbonblackJson.cbResponse

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
act	`str`
dhost	`str`
dntdom	`str`
dpid	`int4`
dproc	`str`
dst	`ip4`
dpt	`int4`
dvchost	`str`
shost	`str`
type	`str`
hostchain	`str`		✓
tag	`str`	cefTag	✓
rawMessage	`str`		✓

Versions Compared

Old Version 2

New Version Current

Key

Introduction

Tag structure

cef0.bit9CarbonblackJson.cbResponse