carbonblack/cb-event-forwarder

Event filtering for raw CB EdR event logs

Closed this issue · 1 comments

Is there any event filtering still supported in the current version of the event forwarder release? Looking back I saw that it was included in the 4.0 beta branch, although that was a few years back. Just wondering what the status of it was?

Hey, this feature ended up having significant negative performance impact and was scrapped. Thanks :)