--- title: "Carbon Black" slug: "carbon-black" updated: 2025-03-27T15:24:46Z published: 2025-03-27T15:24:46Z canonical: "docs.databee.buzz/carbon-black" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Carbon Black Carbon Black is a cloud-native endpoint protection platform to secure your endpoints using a single, lightweight agent and an easy-to-use console. For detailed information refer to the [Carbon Black official documentation](https://techdocs.broadcom.com/us/en/carbon-black/cloud/carbon-black-cloud/index.html). **Integration Method:** API **Tables**: Detection Finding (2004) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Alerts | Retrieve list of alerts | This integration supports the following versions. | Carbon Black API version | v7 | | --- | --- | > [!NOTE] > **Note**: > > Carbon Black is a continuously updated cloud service. As of this document preparation, the latest release was in [March 2025](https://techdocs.broadcom.com/us/en/carbon-black/cloud/carbon-black-cloud/index/cbc-release-notes-tile.html). ## Prerequisites - The user should have access to the Carbon Black portal with an account that has the Global Administrator privileges. - The user should have access to the DataBee console. ## Configuration Overview 1. Generate an API token with the required scopes 1. [Create Access Level](/user-manual/docs/carbon-black#create-access-level) 2. [Create API key](/user-manual/docs/carbon-black#create-api-key) 3. [Copy ORG KEY](/user-manual/docs/carbon-black#copy-org-key) 2. Add the [Carbon Black data feed](/user-manual/docs/carbon-black#databee-configuration) in the DataBee console with the below parameters. | DataBee Parameter | Carbon Black Parameter | | --- | --- | | Access Key | [API ID](/user-manual/docs/carbon-black#create-api-key) | | Secret Key | [API Secret Key](/user-manual/docs/carbon-black#create-api-key) | | Organization Key | [ORG KEY](/user-manual/docs/carbon-black#copy-org-key) | | API Base URL | hostname | ## Carbon Black Configuration ### Create Access Level 1. Login to your Carbon Black cloud dashboard. 2. Get Carbon Black hostname from **URL** as highlighted below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-fue6a9m0.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 3. Navigate to **Settings** > **API Access**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-9spycisz.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 4. Navigate to **Access Levels** and click on **Add Access Level**. ![Inserting image...](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-hrav49zb.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 5. In the “Add Access Level” page, confirm the following, and click on **Save**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-0jvxduky.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) - Name: enter name for Access Level. - Description: enter suitable description for Access Level. - Select the below category with permissions. | **Category** | **Permission Name** | **Permission** | | --- | --- | --- | | Alerts | General Information | READ | ### Create API key 1. Navigate to **API Keys** and click on **Add API Key**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-949nxx6g.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 2. In “Add API Key” page, confirm the following, and click on **Save**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-g39lpjn3.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) - Name: enter API Key Name. - Access Level type: selected as Custom. - Custom Access Level: select the Custom Access Level Name which you have created in previous step. 3. Copy the **API ID** and **API Secret Key**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-k7x3eplj.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) > [!NOTE] > **Note:** > > Copy and save this value. You will not be able to retrieve API Secret Key later. ### Copy ORG KEY 1. Navigate to **Settings** > **General**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-pjousxw6.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 2. Copy the **ORG KEY**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-y71tly0e.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-h1wjx9do.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 2. Search for the **Carbon Black** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-d2xgyxde.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-kf0oyr0n.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-zm0c9anh.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) 5. In the configuration page, confirm the following: ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/carbon-black-mar2025-image-lzhzfbmk.png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A17%3A16Z&se=2026-10-29T00%3A17%3A16Z&sr=c&sp=r&sig=HLvc6baLajXdcoPDNU00L0d7XwajZlg6h%2FIM0BsL9tk%3D) - Authorization Method: Custom API Key - API Base URL: update with your carbon black account hostname. - Access Key: enter API ID. - Secret Key: enter API Secret Key. - Organization Key: enter ORG KEY. - Event Types: preselected for all the event types that integration pulls. 6. Click **Submit**. ## Troubleshooting Tips - Ensure the API ID and API Secret Key are pasted correctly. Since you cannot view the creds after the 1st time, re-create the creds, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed. - Ensure the carbon black scopes/permissions for Access Level are correct.