This section describes how to use the Carbon Black Cloud app for IBM QRadar. What to read next Using the Log Activity Tab in IBM QRadarUse the Log Activity tab in the Carbon Black Cloud app for QRadar to view data pulled from the Carbon Black Cloud. Viewing Device Information in IBM QRadarThe Devices tab in the Carbon Black Cloud app for QRadar provides an overview of the active devices reporting event data to the Carbon Black Cloud. You can view information such as OS version, active policy, sensor version, and more. You can also update the policy that is applied to a device. Mapping Carbon Black Cloud Data in IBM QRadarThe Carbon Black Cloud Log Source Type normalizes Carbon Black Cloud data into a format that QRadar can index. The following table provides the full QRadar to Carbon Black Cloud field mapping. Right-Click Actions in IBM QRadarYou can access the following actions by right-clicking certain columns in the Log Activity page in the Carbon Black Cloud app for QRadar. Each action can require additional configuration in the Carbon Black Cloud app under Settings > Configuration or Settings > Actions. Multi-Tenancy in IBM QRadarMulti-tenant environments allow Managed Security Service Providers (MSSPs) and multi-divisional organizations to provide security services to multiple client organizations from a single, shared IBM® QRadar® deployment. You do not have to deploy a unique QRadar instance for each customer. Parent topic: IBM QRadar
