Cb Event Forwarder 3.3.2 Released

Posted on January 4, 2017

---

Download

• https://github.com/carbonblack/cb-event-forwarder/releases/tag/3.3.2

New Features

• report_title is now retrieved via the EDR REST API for feed hits
• performance increases all around
• updated UI
• Added tests for RabbitMQ stressing
• #64 Added process_path for all events if one exists.
• TLS RabbitMQ Support (thanks to Red Canary)

Post Processing

With the addition of feed_title, post processing needs to be enabled by supplying cb_server_url, api_verify_ssl and api_token

#
# Post Processing Options
#
# Supported post processing:
#
# 1) report_title in feed hits
#
# Post processing requires cb_server_url, api_verify_ssl, and api_token to be set.  The post processed messages are
# dispatched to retrieve additional information from the EDR REST API.  Once the information is retrieved they
# are placed in the ouput queue.
#
# SSL/TLS verification for connections to the EDR REST API
#
# api_verify_ssl=false
#
# The API Token to use when querying the EDR REST API
#
# api_token=