User Column in the Alert Notification email shows the installed User Name instead of the current Logged-In user

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Alert notification email shows the user who installed the sensor instead of the currently logged-in user

Environment

• Carbon Black Cloud console: All Version
• Alert Notification Email: Enabled

Cause

This is working as expected.

Resolution

The User column in the Alert notification email is referring to the user who installed the sensor, not the currently logged-in user

Additional Information

Console UI Field Name	Underlying Field Name (Devices API)
User	login_user_name
Installed by	email