CB ThreatHunter: What Is Needed To Integrate With Splunk?

[#1]

Environment

• CB ThreatHunter PSC Console: All Versions
• Splunk Enterprise: All Supported Versions
• Splunk Cloud: All Supported Versions
• Splunk Light: Not supported

Question

What needs to be done to send information from CB ThreatHunter to Splunk?

Answer

The most current information is available on CB ThreatHunter App for Splunk | Splunkbaseicon/x

Additional Notes

• Searching SplunkBase will return the latest apps and add-ons: Search | Splunkbaseicon/x
• For either Splunk Cloud or Enterprise, only the App (CB ThreatHunter App for Splunk | Splunkbaseicon/x) is required, the Add-Ons are optional
• The Carbon Black Developer Network will be updated to include additional information (https://developer.carbonblack.com/reference/carbon-black-cloud/cb-threathunter/)

Related Content

https://developer.carbonblack.com/reference/carbon-black-cloud/cb-threathunter/
Home | Splunkbaseicon/x
https://developer.carbonblack.com/reference/cb-threathunter/feed-api/
https://developer.carbonblack.com/reference/cb-threathunter/feed-search/
Notifications API Schema - Carbon Black Developer Network
https://developer.carbonblack.com/reference/cb-threathunter/process-search/
https://developer.carbonblack.com/reference/cb-threathunter/process-search-fields/
https://developer.carbonblack.com/reference/cb-threathunter/universal-binary-store-api/
https://developer.carbonblack.com/reference/cb-threathunter/watchlist-api/