With the release of Carbon Black EDR 7.1.0 server, admins can customize the Event Forwarder from directly within the Carbon Black EDR console.

Default: False

By default, this feature is enabled for cloud instances, and disabled for on-prem deployments. You can enable the feature for on-prem by adding EventForwarderEnabled=true in cb.conf and restarting services.

Note: New in version 7.1.0.