Environment
- Carbon Black Cloud: All Versions
- Splunk Enterprise: 8.x
Question
What Splunk Apps and Add-Ons are needed?
Answer
- No longer supported by Splunk. Please use our apps for Splunk version 8
- Single Instance (8.X)
- (Pre-requisite) Splunk CIM Add-on
- Single Instance + Heavy Forwarder (8.X)
- Distributed deployment (8.x)
- Contact Splunk Cloud Support to assist with installation
Additional Notes
- This application connects with any Carbon Black Cloud offering and replaces the existing product-specific Carbon Black apps for Splunk.
- Warning: Do not install the App/TA/IA on the same node.
Related Content