Splunk SIEM

The Carbon Black Cloud App for Splunk SIEM is a single application to integrate your endpoint and workload security features and telemetry directly into Splunk dashboards, workflows and alert streams.

The Carbon Black Cloud App for Splunk SIEM connects with any Carbon Black Cloud offering and replaces the existing product-specific Carbon Black Cloud apps for Splunk SIEM. This app provides a unified solution to integrate Carbon Black Cloud Endpoint Standard and Carbon Black Cloud Workload offerings with Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security.

Out-of-the-box, the Carbon Black Cloud App for Splunk SIEM provides holistic visibility into the state of your endpoints and workloads through customizable dashboards and alert feeds in Splunk SIEM.