node-red-contrib-vmware-cbc 1.0.27

A collection of nodes for VMware Carbon Black Cloud

npm install node-red-contrib-vmware-cbc

This is a collection of nodes for working with the VMware Carbon Black Cloud APIs. This is a growing collection for quick prototyping of proof of concept integrations.

It is not supported by VMware.

Please submit any issues to the Github repo or submit a pull request with changes.


Either use the Menu > Manage Palette > Install option or run the following command in your Node-RED user directory (typically ~/.node-red)

npm i node-red-contrib-vmware-cbc

This package is available at the following locations:


These nodes are just wrappers for the API query. Any endpoint that requires a request body should be submitted as msg.payload. Some endpoints require a request body and something else (like a feed_id). To know what inputs are expected see the documentation for each node. It will have a description, link to the official documentation, and a list of inputs and outputs.

The first time you use these nodes you will need to configure a CBC server with API credentials. Not all fields are required, but you should understand which endpoints use which API key types. If you get a 403 (authentication) error, make sure the API type is populated and has the correct access level.

These nodes are generally designed to work well with each other. For example, some APIs need to work together (like Process Search). These nodes will output the primary field of interest (typically the id) as its own element in the msg object (i.e. msg.job_id). This is the same structure as is expected by the follow-up call.

If you find any opportunities for improvement let me know. This is a community project to help articulate the possibilities with the APIs.


I included my VScode custom Snippets. These can be used to quickly create new endpoints. Just type nr and select from the options. Everything uses one html template, and there are JS templates for GET, POST, and DELETE requests.

Node Info

Version: 1.0.27
Updated 3 years, 6 months ago
License: MIT
Rating: 5.0 1




4 in the last week


  • carbon-black-cloud
  • alert-search
  • get-alert-by-id
  • create-note
  • get-notes
  • delete-note
  • search-devices
  • device-actions
  • get-time-limits
  • start-process-search
  • retrieve-process-search-results
  • get-events-for-process
  • configure-reputation-override
  • get-reputation-override
  • search-reputation-override
  • start-enriched-events-search
  • retrieve-enriched-events-search-results
  • get-policies
  • download-file
  • request-signature
  • retrieve-metadata
  • get-all-feeds
  • get-specific-feed
  • create-new-private-feed
  • delete-feed
  • get-reports
  • replace-reports
  • start-session
  • get-session-status
  • send-command
  • get-command-status
  • close-session


  • vmware
  • carbon black
  • carbon black cloud
  • security
  • node-red