API curl command returning Authentication failure despite correct API Key values

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

• The following error is observed when running a curl command using correct API Key values:

  "{"message" : "Authentication failure", "success" : false}"

• Using an API Key with the Access Level set to SIEM

Environment

• Carbon Black Cloud Console: Current Version
• REST API

Cause

The SIEM Access Level is not intended for API queries.

Resolution

1. Create a new API Key with Access Level set to API
2. Run the curl command again, using the API Secret Key and API ID of the newly created API Key