Carbon Black Cloud: Splunk App IA Module Not Working With Proxy

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• IA module not communicating over proxy
• Errors in index showing: "Received a network connection error from <Backend URL>. Failed to establish a new connection:[Errno 110] Connection timed out))

Environment

• Carbon Black Cloud: All Versions
• Splunk App 5332: Version 1.1.0
• Proxy being used

Cause

Known issue with Splunk App 1.1.0

Resolution

Upgrade the App to version 1.1.1 or Higher

Additional Information

https://splunkbase.splunk.com/app/5332/