EDR: Is advanced logging audit logs configurable on a Unified View server for connected nodes?
book
Article ID: 284845
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Is advanced audit logging (useractivity.logs) configurable on a Unified View Server?
Environment
- EDR (formerly CB Response): All Supported versions
- Unified View Server: All Supported versions
Resolution
No, advanced logging is only available on an actual EDR server.
Additional Information
(useractivity.logs) are considered advanced logging and are only configurable from an actual EDR server
Feedback
thumb_up
Yes
thumb_down
No