Watch this end-to-end demo by Bruce Deakyne on Data Forwarder & Splunk Configuration. At the end of this demo you'll get an understanding of getting alerts, watchlist hits, and endpoint events from VMware Carbon Black Cloud to Splunk via AWS S3 & SQS.