cef1.carbonBlack.protection

Introduction

The table cef1.carbonBlack.protection identifies events in CEF format generated by Carbon Black.

Tag structure

Events in CEF format don't have a specific tag structure, as explained in Technologies supported in CEF syslog format. They are always sent to a table with the structure cefx.deviceVendor.deviceProduct.

In this case, the valid data tables are:

• cef1.carbonBlack.protection

How is the data sent to Devo?

You can send your product logs to Devo using any of the available methods, for example using any Syslog drain or using the Devo In-house Relay. Learn more about how to configure Forcepoint web protection solutions to send logs here.

Learn more about CEF syslog format and how Devo tags these events in Technologies supported in CEF syslog format.