Carbon Black Cloud: The User Column in the Alert Notification Email Shows the Installed User Name Instead of the Current Logged-In User

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Alert notification email shows the user who installed the sensor instead of the currently logged-in user

Environment

• Carbon Black Cloud console: All Version
• Alert Notification Email: Enabled

Cause

This is working as expected.

Resolution

The User column in the Alert notification email is referring to the user who installed the sensor, not the currently logged-in user

Additional Information

• If a change to this functionality is desired, a feature request can be submitted using Voice of the Customer on the UeX

Console UI Field Name	Underlying Field Name (Devices API)
User	login_user_name
Installed by	email