Carbon Black Cloud: Events fail to populate after upgrading to QRadar 7.5

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Events cease to populate after upgrading to QRadar 7.5

Environment

• Carbon Black Cloud
• CBC QRadar App 2.1
• IBM Security QRadar SIEM 7.5

Cause

QRadar 7.5  implemented changes that made it incompatible with the Carbon Black 2.1 App.

Resolution

Resolution will be addressed with the upcoming release of the Carbon Black Cloud QRadar application 2.2.