Document toolboxDocument toolbox

cef0.vmwareCarbonBlack

Owned by Former user (Deleted)
Nov 02, 2023
1 min read
[ 1 Introduction ] [ 2 Tag structure ]

Introduction

The tables beginning with cef0.vmwareCarbonBlack identify events in CEF format generated by VMWare CarbonBlack Endpoint Services.

Tag structure

Events in CEF format don't have a specific tag structure, as explained in Technologies supported in CEF syslog format. They are always sent to a table with the structure cef0.deviceVendor.deviceProduct.

In this case, the valid data tables are:

  • cef0.vmwareCarbonBlack.appControl