Skip Navigation

Configure threat data report

This section is optional and provides insight into retrieving
BlackBerry Protect Desktop
data only once per day, as opposed to the syslog data feed, which is real-time. For those that cannot consume syslog data (or want both data sources), the
CylancePROTECT
Application for
Splunk
provides the Threat Data Report-based sourcetypes, such as threats and devices.
To enable data of these sourcetypes, you will need to configure your app to match your
BlackBerry
Console settings, such as the Threat Data Report download URL and the current Threat Data Report token.
To configure tenants, go to the application’s Help menu and select Configure TDR, which should take you to the following URL:
http://<IP>:<PORT>/en-US/app/cylance_protect/ConfigureTDR
Tenant information is available in the
BlackBerry
Console on the
Settings/Application
page, using the information below.