All Apps and Add-ons

Carbon Black Defense add-on api URL now depreciated by Carbon Black?

sirpatrick
Explorer

It would appear that at 03:15 UTC or so on 12/20/2019 calls to the integrations/v3 API started returning an error 503 for us. We had heard that they were planning to depreciate the v3 API's, but the app still uses them.

Is anyone else encountering this issue? If so, do you have a work around?

Thanks!

0 Karma

sirpatrick
Explorer

I received this information regarding the API's directly from Carbon Black while they were working on a related issue. The current add-on we are all using which is available from Splunkbase leverages API v3. I do not know the differences between v3 & v6 but would be surprised if the parsing of data would not be impacted.

Direct quote from Carbon Black:
"However, it does appear that the v3 API is considered "deprecated" and the v6 API should be used, so that is something that we should take into consideration for the future and start moving the current API integrations over to the supported version when possible. Please let me know if you have any additional concerns about this."

I guess my next step is to chase down who is responsible for items published by the "Carbon Black Developer Network" and see if this is going to be updated or allowed to die on the vine.

0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...