Accurate event monitoring requires that client computers are online and actively monitored byCarbon Black App Control Agents.

This section assumes that:

  • Carbon Black App Control policies have been created and configured.
  • The agent is installed on the computers you want to monitor, and the computers have completed their initialization.
  • All agents are at the latest available agent version for each OS platform in your environment.

For more information about these tasks, refer to Creating and Configuring Policies and Managing Computers

Although not a prerequisite for monitoring, if you intend to use an external event logging server, install the SQL Server on that system and configure the Carbon Black App Control Server to connect to the external server to begin capturing events on the external server as soon as possible. See Setting up External Event Logging.