This topic describes Lookups and Acceleration options in the Carbon Black Cloud app for Splunk SIEM.
Lookup Files
The Carbon Black Cloud app does not contain lookup files.
Acceleration
Acceleration | Supported? |
---|---|
Summary Indexing | No |
Data Model Acceleration | Yes, if enabled |
Report Acceleration | No |