cef1.carbonBlack.protection
- Juan Tomás Alonso Nieto (Deactivated)
Jul 06, 2022
1 min read
Loading data...
[ 1 Introduction ] [ 2 Tag structure ] [ 3 How is the data sent to Devo? ]
Introduction
The table cef1.carbonBlack.protection identifies events in CEF format generated by Carbon Black.
Tag structure
Events in CEF format don't have a specific tag structure, as explained in Technologies supported in CEF syslog format. They are always sent to a table with the structure cefx.deviceVendor.deviceProduct.
In this case, the valid data tables are:
cef1.carbonBlack.protection
How is the data sent to Devo?
You can send your product logs to Devo using any of the available methods, for example using any Syslog drain or using the Devo In-house Relay. Learn more about how to configure Forcepoint web protection solutions to send logs here.
Learn more about CEF syslog format and how Devo tags these events in Technologies supported in CEF syslog format.