CB Response Cloud: How to Enable a Cloud-Based Lastline Connector

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To enable a cloud-based Lastline connector for a CB Response Cloud instance

Environment

• CB Response Cloud: All Versions

Resolution

1. Open a Carbon Black support case.
2. Inform Carbon Black Support if the Lastline device is on-prem or in the Cloud.
3. If the Lastline SIEM is cloud-based:
   • Provide the Lastline API key on the case.
4. Verify that the Lastline connector is working appropriately after the integration is complete.