Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to Troubleshoot Connector or API Issues

Carbon Black Cloud: How to Troubleshoot Connector or API Issues

Environment

  • Carbon Black Cloud Console:  All supported Versions

Objective

How to troubleshoot connector or API issues

Resolution

Review configurations in the Carbon Black Cloud console to confirm the selections/information entered are correct:

  1. Connector type
  2. Connector ID
  3. API Key
  4. Notifications have been forwarded to the SIEM
  5. Notifications have been assigned to the correct policy
  6. Notifications have been subscribed to the connector

Also check for debug logs as noted in the Developer page:

https://developer.carbonblack.com/reference/cb-defense/connectors/#debug-logs
 

Additional Notes

Common causes for API/Connector Issues

  1. <Response [401]> Error
  2. Authorized IP Field
  3. REST API Not handling Multi-Byte text properly
  4. Connector not connecting - URL
  5. Error: Output_Format not Specified
  6. Not using connector type SIEM

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
1042
Contributors