Carbon Black Cloud: Events fail to populate after upgrading to QRadar 7.5

[#1]

Environment

• Carbon Black Cloud
• CBC QRadar App 2.1
• IBM Security QRadar SIEM 7.5

Symptoms

Events cease to populate after upgrading to QRadar 7.5

Cause

QRadar 7.5  implemented changes that made it incompatible with the Carbon Black 2.1 App.

Resolution

Resolution will be addressed with the upcoming release of the Carbon Black Cloud QRadar application 2.2.

Related Content

Carbon Black Cloud: How To Troubleshoot QRadar Integration Issues

Carbon Black Cloud: How to configure the VMware Carbon Black Cloud App in QRadar

Carbon Black Cloud: Qradar Connection Fails to Establish Connection to the Cloud Backend   

Carbon Black Cloud: How to fetch logs for CBC Qradar app 2.0