Monitoring Console Health Checks in Splunk SIEM

The Carbon Black Cloud app includes health checks (default/checklist.conf).

VMware CBC API Errors

Determines whether there are any Carbon Black Cloud errors.

VMware CBC Alerts Present

Determines whether there are any Carbon Black Cloud alerts present in the indexes.

VMware CBC Events Present

Determines whether there are any Carbon Black Cloud events present in the indexes.

VMware CBC Vulnerabilities Present

Determines whether there are any Carbon Black Cloud vulnerabilities present in the indexes.