I would like to export data from VMware Carbon Black EDR to Arctic Wolf environment to track alerts and other logs.
VMware Carbon Black EDR (CB Response)
Arctic Wolf only supports VMware Carbon Black Cloud environments for exports. The Arctic Wolf application will not be able to retrieve EDR data over API.
You have the option to transition to VMware Cloud applications or create another server that can retrieve the exported data from EDR using a tool like Canary Exporter and then submit the data to Arctic Wolf.
Arctic Wolf would only accept API keys from Carbon Black Cloud infrastructure that includes an organization ID. Refer to Arctic Wolf documentation for more information: https://docs.arcticwolf.com/cloud/carbon_black_credentials.html
Please sign in to leave a comment.