All you need to do is install the add-on and make sure your CEF data's sourcetype is "cefevents"
Hi...I wanted to followup on this question, if I may, as we are looking at installing this add-on. We are using Distributed deployment. So, does this addon get installed on the Forwarder? If so, the Forwarder client is on Linux. So, being a *nix novice, would we just run the tar command?
Hopefully you figured it out or asked in a new thread. For installing to your forwarder in a distributed env, hopefully you have a deployment server and would unzip the tgz into the deployment-apps folder there, then assign it to your forwarder via serverclass.conf entry.