icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Log4Shell Vulnerability: Information and guidance for you. Get resources.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading IA - VMware Carbon Black Cloud
SHA256 checksum (ia-vmware-carbon-black-cloud_115.tgz) af6c0575b6b13baef08ee75c9cce05e568cc34f08eb5b7c27bf11bcf5fee70b0 SHA256 checksum (ia-vmware-carbon-black-cloud_114.tgz) d03b38dc4d20c59423f1a52bf6c33125bd6a6b0c8fa6d535b3159ffd44ad9f9e SHA256 checksum (ia-vmware-carbon-black-cloud_113.tgz) 9fc4aa60b3d164246dae546f5372d21573fa2b8d2b1777f3352223f9145e537f SHA256 checksum (ia-vmware-carbon-black-cloud_112.tgz) d628edae8d5e4a74c4c13b39cdaef9dde213aec3e7e429642712d322fd699711 SHA256 checksum (ia-vmware-carbon-black-cloud_111.tgz) 6e71a956a9249f7705e7cc18e5287fb126412215af65ffd1445f702154f2320e SHA256 checksum (ia-vmware-carbon-black-cloud_110.tgz) c7d20ad15f2312d5b2511ca9d260b466a0601686f426417ed8584df18262fcb9 SHA256 checksum (ia-vmware-carbon-black-cloud_103.tgz) 6b6c1540d8bd02354d7ea7e89dd8cfdb0931a9298699b0dd72055169ab762a71 SHA256 checksum (ia-vmware-carbon-black-cloud_100.tgz) db857b3106541cc6fe30802e400b03a41187420c224a86733297b58911d4696c
To install your download
To install apps and add-ons from within Splunk Enterprise
  1. Log into Splunk Enterprise.
  2. On the Apps menu, click Manage Apps.
  3. Click Install app from file.
  4. In the Upload app window, click Choose File.
  5. Locate the .tar.gz file you just downloaded, and then click Open or Choose.
  6. Click Upload.
  7. Click Restart Splunk, and then confirm that you want to restart.
To install apps and add-ons directly into Splunk Enterprise
  1. Put the downloaded file in the $SPLUNK_HOME/etc/apps directory.
  2. Untar and ungzip your app or add-on, using a tool like tar -xvf (on *nix) or WinZip (on Windows).
  3. Restart Splunk.
After you install a Splunk app, you will find it on Splunk Home. If you have questions or need more information, see Manage app and add-on objects.

Flag As Inappropriate


IA - VMware Carbon Black Cloud

Splunk Cloud
Please see https://splunkbase.splunk.com/app/5332/ for full details.

The VMware Carbon Black Cloud App for Splunk is a single application to integrate your endpoint and workload security features and telemetry directly into Splunk dashboards, workflows and alert streams.

This application connects with any Carbon Black Cloud offering and replaces the existing product-specific Carbon Black apps for Splunk. This app provides a unified solution to integrate Carbon Black Cloud Endpoint and Workload offerings with Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES). Out-of-the-box, this app provides holistic visibility into the state of your endpoints and workloads through customizable dashboards and alert feeds in Splunk.

Release Notes

Version 1.1.5
July 5, 2022

Added 3 minute timeout to ProcessGUIDDetails alert action
Update client handler to process more than 2500 remediation results
Updated client handler to capter 410 errors on Live Query result histories and save the checkpoint

Version 1.1.4
Feb. 9, 2022
Version 1.1.3
Nov. 19, 2021

Fixed simple reload triggers.

Version 1.1.2
Aug. 31, 2021

Please see https://splunkbase.splunk.com/app/5332 for full details

Version 1.1.1
April 26, 2021

Please see https://splunkbase.splunk.com/app/5332/details for full release notes.

Version 1.1.0
March 1, 2021

Please see https://splunkbase.splunk.com/app/5332/ for full details.

Version 1.0.3
Dec. 14, 2020

Documentation Update

Version 1.0.0
Nov. 18, 2020

Initial release

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.