EDR: All Reports in Custom Feed Are Deleted On First Full Sync

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When using a custom feed, feed reports are shown when feed is added and enabled, but are deleted after first full sync of the feed.

Environment

• EDR Server:  All Versions

Cause

• Reports ID's in custom feeds must be alphanumeric strings. 
• Reports IDs stored as simple integer values will display this behavior

Resolution

• CB-32019 will improve this functionality in a future release
• Generate feed ID's in reports as alphanumeric strings, not Integers.  
• Correct id format in feed json:

"id":"76582"

• Incorrect id format in feed json which will cause this behavior:

"id":76582