EventForwarderEnabled

With the release of Carbon Black EDR Server 7.1.0, admins can customize the Event Forwarder from directly within the Carbon Black EDR console.

Default: False

By default, this feature is enabled for cloud instances, and disabled for on-prem deployments. You can enable the feature for on-prem by adding EventForwarderEnabled=true in cb.conf and restarting services.

This feature cannot be used to control Event Forwarder instances that are remote to the Carbon Black EDR server.

Note: New in version 7.1.0.