You can use these FAQs, tips, and examples to get started with Data Forwarder custom query filters. Carbon Black Cloud uses Lucene, a powerful query syntax, for Alert, Event, and Process search as well as query-based Watchlists.| docs.vmware.com
Back to BlogsAnnouncing the XDR Events Data Forwarder!| developer.carbonblack.com
| developer.carbonblack.com