Forward events from Cb Resonse Cloud to Splunk Cloud

carbonblack / cb-event-forwarder

Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.

Other

73 stars 43 forks source link

Forward events from Cb Resonse Cloud to Splunk Cloud #141

Closed rzzldzzl closed 5 years ago

rzzldzzl commented 5 years ago

It does not appear there that cb-event-forwarder will work with CbR Cloud as RabbitMQ is not exposed. Is there a way to forward events from CbR Cloud to Splunk Cloud?

jgarman commented 5 years ago

The Cb Event Forwarder is installed on the Response Cloud server directly by our ops team. Open up a support ticket with Cb support containing your HTTP Event Collector information for Splunk Cloud and we will get the Event Forwarder configured for you. If you need any help please reach out to support and they'll get you taken care of.