EventExclusionsEnabled

If set to True, this setting enables a console feature that lets you exclude the collection of certain process events from macOS and Windows hosts based on the path of the parent process.

Default: False

The settings are applied on a per sensor group basis and defined on an Exclusions tab on the Edit Group Settings page (only visible when this setting is True).

This flag is supported on Windows for Carbon Black EDR sensor versions 7.3.0+, and on macOS for Carbon Black EDR macOS sensor versions 6.0.4+ (in the 6.x series) and 5.2.7+ (in the 5.x series).

Note: To enable this feature, you must restart cb-enterprise services.