What is the URL that we should be using for API configuration?
https://
Full detail on the URLs for each environment are available here.Note: Do not include a trailing slash, the value should only be the hostname e.g. defense.conferdeploy.net
10,000
Dismiss all future alerts
functionality2500
.8.0 or higher
. If you are using Splunk version 7.x, you will need to upgrade the version of Splunk to use the new Carbon Black Cloud app.Event
and Alert
models from the Splunk CIM.Message Time
and Timestamp
field in Splunk?
_time
field.
Administration
–> Application Health Overview
tab in the VMware Carbon Black Cloud application for errors.Received error code 403
, 401 Unauthorized
, User is not authenticated
or Check your API credentials
More than 1 VMware CBC App detected
Received network connection error from …
Ensure the hostname configured with your API token on the Application Configuration
-> API Token Configuration
page does not include https://
or a trailing slash. For more details verifying your URL see the Authentication Guide
Are you using a proxy?
If the issue persists, check your proxy logs to see if there are requests from the Splunk server.