This content pack will spawn inputs on UDP port 11005 and correctly parse incoming Bit9 messages -- or now known as Carbon Black Enterprise Protection.
dubsout / graylog-carbonblack-enterpriseprotection Goto Github PK
View Code? Open in Web Editor NEWCarbon Black Enterprise Protection (Bit9) Content Pack
License: Apache License 2.0