Configure the Carbon Black Collector in Axon

The next step after successfully Configuring Carbon Black is to add the collector type to Axon.

Add a Carbon Black Collector

Only Administrators can take this action.

1. In the lower-left corner of the main screen, click the Administration cog.
   The Administration menu appears on the left side.
2. Under Integrations, click Collectors.
   The Collectors page appears.
3. In the upper-right corner, click + Add Collector.
   The Add Collector Wizard appears.
4. Select Carbon Black from the list of collector types.
   A list of Log Source Types associated with the Carbon Black collector appears on the right.
5. Click Configure.

6. Enter the following information on the configuration page.
   Fields marked with an asterisk (*) are required.

   Option	Description
   Collector Name *	Enter a unique name for this collector.
   Description	Enter an optional detailed description for this collector.
   Collection Schedule *	Enter a value and select a time interval (Minutes, Hours, Days) from the drop-list to determine how often the collector sends new requests.
   Collection Time Out *	Enter the period after which collection will time out while stalled. The default of five minutes means that after five minutes of failing to collect, the collection will time out.
   Log Collection Endpoint *	Edit the default endpoint hostname per your Carbon Black licensed environment. The hostname is boldfaced in the default value below: https://defense.conferdeploy.net/appservices/v6/orgs/:org_key/alerts/_search Refer to the Official Carbon Black Documentation for information on determining your hostname.
   Back period for collection *	Enter the period for which logs are collected. The default of 30 minutes means that every collection gathers logs for the previous 30 minutes.
   API Secret Key *	Enter the name of the API Secret Key configured during the steps outlined in Configure Carbon Black.
   API ID *	Enter the name of the API ID configured during the steps outlined in Configure Carbon Black.
   Org Key *	Enter the name of the Org Key obtained during the steps outlined in Configure Carbon Black.

7. Click Connect to test the collector's connection.
   If the connection is successful, the Carbon Black collector is added to the list of collectors in Axon.