Please see https://splunkbase.splunk.com/app/5624/ for full details
The VMware Carbon Black EDR On-Prem for Splunk is a single application to integrate your EDR security features and telemetry directly into Splunk dashboards, workflows and alert streams.