Disable Sensor EMET Event Reporting

By default, sensors on any host with EMET installed include EMET events in the logs that reported back to their Carbon Black EDR server. However, you can disable EMET event reporting for all sensors in a sensor group.

For more information about sensor groups, see "Sensor Groups" in the VMware Carbon Black EDR User Guide.

Procedure

1. Log into Carbon Black EDR.
2. On the left navigation bar, click Sensors.
3. On the Sensors page, select the sensor group to disable EMET event reporting.
4. Click the Edit Settings button to display the Edit Group Settings page.
5. Click the Event Collection tab and deselect the EMET events checkbox.
   
6. Click Save Changes.
   EMET event collection will no longer be included in the logs that are sent to the Carbon Black EDR server.
   Note: To re-enable EMET event collection for a sensor group, follow the same procedure but select the EMET events checkbox before saving the changes.