endpoint.vmware
- Juan Tomás Alonso Nieto (Deactivated)
Jul 06, 2022
1 min read
Loading data...
[ 1 Introduction ] [ 2 Valid tags and data tables ]
Introduction
The tags beginning with endpoint.vmware identify events generated by VM Ware Carbon Black.Â
Valid tags and data tables
The full tag must have 4 levels. The first two are fixed as endpoint.vmware. The third level identifies the type of events sent, and the fourth level indicates the event subtype.Â
Technology | Brand | Type | Subtype |
|---|---|---|---|
endpoint | vmware |
|
|
These are the valid tags and corresponding data tables that will receive the parsers' data:
Tag | Data table |
|---|---|
endpoint.vmware.cbc_api.alerts | endpoint.vmware.cbc_api.alerts |
endpoint.vmware.cbc_defender.audit_logs | endpoint.vmware.cbc_defender.audit_logs |