EDR: Is advanced logging audit logs configurable on a Unified View server for connected nodes?
search cancel

EDR: Is advanced logging audit logs configurable on a Unified View server for connected nodes?

book

Article ID: 284845

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is advanced audit logging (useractivity.logs) configurable on a Unified View Server?

Environment

  • EDR (formerly CB Response): All Supported versions
  • Unified View Server: All Supported versions 

Resolution

No, advanced logging is only available on an actual EDR server.

Additional Information

(useractivity.logs) are considered advanced logging and are only configurable from an actual EDR server