If this property is not empty, it enables publishing of incoming events from sensors onto RabbitMQ PUBSUB enterprise bus.

Default: (None)

See See RabbitMQ (cb-rabbitmq service) settings.

The value of this property consists of one or more of the following comma-separated event types:

  • procstart (or process )
  • procend
  • childproc
  • moduleload
  • module (a new module/binary has been encountered)
  • filemod
  • regmod
  • netconn
  • crossproc

To subscribe to all event types, specify the value as " * ". Each event type is published to its own topic: ingress.event.<event type>.