Using the Splunk App for Carbon Black App Control

The Splunk App for Carbon Black App Control helps Splunk effectively present Carbon Black App Control data.

Installing and configuring the app adds a set of dashboards specifically for displaying Carbon Black App Control data. It also enhances Splunk’s ability to handle Carbon Black App Control data in other views — for example, by identifying Carbon Black App Control as the source of the data, identifying the purpose of each keyword in the key/value pairs, decoding Carbon Black App Control-specific values, and by mapping Carbon Black App Control fields to the Common Information Model (CIM) so that Carbon Black App Control data can be combined with data from other sources.