Splunk SOAR


The VMware Carbon Black Cloud App for Splunk SOAR allows administrators and security analysts to leverage the industry leading cloud-based, next generation, anti-virus solution to prevent malware and non-malware attacks. It gives them access to the alerts through the REST API and provides a set of actions that enable them to orchestrate and automate complex tasks within the enterprise environment.

The Carbon Black Cloud App for Splunk SOAR contains 40 SOAR actions.


  • Access to Carbon Black Cloud
  • Splunk SOAR version 5.3.0 or later

Quick Links

Support and Resources

  • Use the Developer Community Forum to discuss issues and get answers from other API developers in the Carbon Black Community.
  • Report bugs and change requests to Carbon Black Support.
  • View all API and integration offerings on the Developer Network along with reference documentation, video tutorials, and how-to guides.

Give Feedback

Use this form to give us feedback about this site or any of the documentation.

Last modified on May 4, 2023