icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Log4Shell Vulnerability: Information and guidance for you. Get resources.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading TA- VMware Carbon Black Cloud
SHA256 checksum (ta-vmware-carbon-black-cloud_115.tgz) 0bb33865551b1a9af016e0e5891b558d486a4f6f310a224e29467638a18b7765 SHA256 checksum (ta-vmware-carbon-black-cloud_114.tgz) bcc065258b019bee6560d4a332872c7513c4cd5ec7a7c4beb8c3b2b6b6bf4aaf SHA256 checksum (ta-vmware-carbon-black-cloud_113.tgz) 9178c0b0ad58c56d338be400720cc2b6a8082f4c780437f8508caa3587699151 SHA256 checksum (ta-vmware-carbon-black-cloud_112.tgz) 8cc83012052f7d2586d6a22a4c8c0d72a98eade9c1e89a23fa4e14277939572e SHA256 checksum (ta-vmware-carbon-black-cloud_111.tgz) e39f272b5191d73df65b7670e654333826ab70016a606b59a1b43703a5ea3270 SHA256 checksum (ta-vmware-carbon-black-cloud_110.tgz) 7aacc907988db9bb29ecf898354b2ae09174a98beced52eebb4ba4ba4fe17a25 SHA256 checksum (ta-vmware-carbon-black-cloud_103.tgz) 0e68bfd406524374c2f74c4c5bd465c1acfc8e32ac92e4e6daaaf53c0fedfeb5 SHA256 checksum (ta-vmware-carbon-black-cloud_100.tgz) 64e6af3d87f9f10f4b642229f75f6489eb256c34da9946b498f5207c9f45e0ea
To install your download
To install apps and add-ons from within Splunk Enterprise
  1. Log into Splunk Enterprise.
  2. On the Apps menu, click Manage Apps.
  3. Click Install app from file.
  4. In the Upload app window, click Choose File.
  5. Locate the .tar.gz file you just downloaded, and then click Open or Choose.
  6. Click Upload.
  7. Click Restart Splunk, and then confirm that you want to restart.
To install apps and add-ons directly into Splunk Enterprise
  1. Put the downloaded file in the $SPLUNK_HOME/etc/apps directory.
  2. Untar and ungzip your app or add-on, using a tool like tar -xvf (on *nix) or WinZip (on Windows).
  3. Restart Splunk.
After you install a Splunk app, you will find it on Splunk Home. If you have questions or need more information, see Manage app and add-on objects.

Flag As Inappropriate


TA- VMware Carbon Black Cloud

Splunk Cloud
Please see https://splunkbase.splunk.com/app/5332/ for full details

The VMware Carbon Black Cloud App for Splunk is a single application to integrate your endpoint and workload security features and telemetry directly into Splunk dashboards, workflows and alert streams.

This application connects with any Carbon Black Cloud offering and replaces the existing product-specific Carbon Black apps for Splunk. This app provides a unified solution to integrate Carbon Black Cloud Endpoint and Workload offerings with Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES). Out-of-the-box, this app provides holistic visibility into the state of your endpoints and workloads through customizable dashboards and alert feeds in Splunk.

Release Notes

Version 1.1.5
July 5, 2022

Added 3 minute timeout to ProcessGUIDDetails alert action
Update client handler to process more than 2500 remediation results
Updated client handler to capter 410 errors on Live Query result histories and save the checkpoint

Version 1.1.4
Feb. 9, 2022
Version 1.1.3
Nov. 19, 2021

Fixed simple reload triggers.

Version 1.1.2
Aug. 31, 2021

Please see https://splunkbase.splunk.com/app/5332 for full details

Version 1.1.1
April 26, 2021

Please see https://splunkbase.splunk.com/app/5332/details for full release notes.

Version 1.1.0
March 1, 2021

Please see https://splunkbase.splunk.com/app/5332/ for full details.

Version 1.0.3
Dec. 14, 2020

Documentation Update

Version 1.0.0
Nov. 18, 2020

Initial Release

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.