Installing the Carbon Black Cloud App for IBM QRadar

This section describes how to install the Carbon Black Cloud app for IBM QRadar.

Requirements:

• Access to Carbon Black Cloud
• IBM QRadar version 7.5.0 update pack 3 or later

This section describes:

• How to choose and set up the appropriate log source(s) for your Carbon Black Cloud app for QRadar
• Steps to install and configure settings in the app
• Various pages and actions you can use after it is configured

Log Source

The Carbon Black Cloud app offers two log source input options or methods of data ingestion. Each method supports different types of data. To access all types of data, you must use a combination of Built-in input and Data Forwarder input. To use additional features such as Device information and right-click actions, follow the instructions provided in the following topics.