Overview

You will need the following information in order to onboard your Carbon Black Alert data source:

1. Product URL
2. Org Key
3. API ID
4. API Secret Key

Determine Your Product URL

Step 1. You need to determine which environment, or product URL you use. You can find this by looking at the web address of your Carbon Black Cloud console. Select your URL to view a table with the base URL for each product and API.

• EAP01 - https://defense-eap01.conferdeploy.net/
• Prod 01 - https://dashboard.confer.net/
• Prod 02 - https://defense.conferdeploy.net/
• Prod 05 - https://defense-prod05.conferdeploy.net/
• Prod 06 - https://defense-eu.conferdeploy.net/
• Prod NRT - https://defense-prodnrt.conferdeploy.net/
• Prod Syd - https://defense-prodsyd.conferdeploy.net/

For example, your Product URL would be https://defense-prod05.conferdeploy.net/ if you are using Prod 05.

Find Your Org Key

Step 2. Your Org Key can be found in your product console under Settings > API Access > API Keys.

Creating a Custom Access Level

Step 3. You need to create a custom Access Level before you create your API Key. In order to onboard your Carbon Black alerts with Fletch, your API Key needs “READ” permission for “org.alerts”.