Is Data Forwarder input required for the Carbon Black Cloud app for QRadar?
The Data Forwarder is the recommended approach for ingesting Alerts and Endpoint Events into QRadar due to its reliability, scale, and low latency. This approach is only required to ingest Endpoint Event data.