Hardware and software requirements for the Splunk Add-on for Carbon Black
Carbon Black requirements
This add-on consumes Carbon Black event data from a JSON file. You download and run the Carbon Black Event Forwarder utility (cb-event-forwarder) in order to generate the JSON file. Splunk monitors the JSON file that is generated by this utility.
The cb-event-forwarder utility and installation instructions are available on GitHub at https://github.com/carbonblack/cb-event-forwarder.
Splunk platform requirements
Because this add-on runs on the Splunk platform, all of the system requirements apply for the Splunk software that you use to run this add-on.
- For Splunk Enterprise system requirements: see System Requirements in the Splunk Enterprise Installation Manual.
- If you are managing on-premises forwarders to get data into Splunk Cloud, see System Requirements in the Splunk Enterprise Installation Manual, which includes information about forwarders.
About the Splunk Add-on for Carbon Black
Installation and configuration overview for the Splunk Add-on for Carbon Black
This documentation applies to the following versions of Splunk® Supported Add-ons: released