Perform the following procedure to enable your Carbon Black EDR Unified View access to a cluster.

Procedure

  1. On the Username menu in the upper right corner of the console, click My Profile.
  2. Click My Clusters.
  3. If the API Token field for the cluster to add to your Carbon Black EDR Unified View states Enter API Token, get an API token from a Carbon Black EDR cluster user (not Carbon Black EDR Unified View) and enter it into that field. The permissions of the user account whose API token you are using determines your access to that cluster and its data.
  4. After you have entered an API token, or if the cluster is configured for a shared token, the Enabled slider shows blue and white when access is enabled. If that is not the case, click the button to the right to enable cluster access.

Results

After a cluster is enabled on a user’s My Profile page, that user has access to the cluster’s data during searches and can browse to that cluster through Carbon Black EDR Unified View. These capabilities are subject to privileges of the Carbon Black EDR cluster user whose token was used for authentication. See the Carbon Black EDR User Guide for details about user permissions.