EventExclusionsEnabled

If set to True, this setting enables a console feature that lets you exclude the collection of certain process events from macOS hosts based on the path of the parent process.

Default: False

The settings are applied on a per sensor group basis and defined on an Exclusions tab on the Edit Group Settings page (only visible when this setting is True).

This is currently only supported on macOS for Carbon Black EDR macOS sensor versions 6.0.4 and above (in the 6.x series) and 5.2.7 and above (in the 5.x series).

Note: To enable this feature, you must restart cb-enterprise services.

Note: New in version 6.1.