Carbon Black Cloud: Splunk App Dashboard displays 0 records in the CBC Alerts Overview

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Reviewing the CBC Alerts overview in the Splunk CBC App returns 0 results for alerts.
• There is nominal data ingress.
• Configuration is correct.

Environment

• Carbon Black Cloud App for Splunk: 1.1.9

Cause

Product defect in CBC App for Splunk.

Resolution

Fix scheduled in upcoming release(ETA TBD).