What is the URL that we should be using for API configuration?
https://Full detail on the URLs for each environment are available here.
Note: Do not include a trailing slash, the value should only be the hostname e.g. defense.conferdeploy.net
Dismiss all future alertsfunctionality
8.0 or higher. If you are using Splunk version 7.x, you will need to upgrade the version of Splunk to use the new Carbon Black Cloud app.
Alertmodels from the Splunk CIM.
Timestampfield in Splunk?
Application Health Overviewtab in the VMware Carbon Black Cloud application for errors.
Received error code 403,
User is not authenticatedor
Check your API credentials
More than 1 VMware CBC App detected
Received network connection error from …
Ensure the hostname configured with your API token on the
Application Configuration ->
API Token Configuration page does not include
https:// or a trailing slash. For more details verifying your URL see the Authentication Guide
Are you using a proxy?
If the issue persists, check your proxy logs to see if there are requests from the Splunk server.