endpoint.carbonblack
[ 1 Introduction ] [ 2 Valid tags and data tables ]
Introduction
The tags beginning with endpoint.carbonblack identify events generated by VMware Carbon Black.
Valid tags and data tables
The full tag must have 3 levels. The first two are fixed as endpoint.carbonblack. The third level identifies the type of events sent.
Technology | Brand | Type |
---|---|---|
endpoint | carbonblack | protection |
These are the valid tags and corresponding data tables that will receive the parsers' data:
Tag | Data table |
---|---|
endpoint.carbonblack.protection | endpoint.carbonblack.protection |
Â