Carbon Black Cloud: Does max of 10,000 returned results shown in console means event lost?
book
Article ID: 285484
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Does max of 10,000 returned results shown in console means event lost?
Environment
- Carbon Black Cloud Backend: August 26, 2021 release
Resolution
No, all the events are still collected and stored without missing.
Additional Information
- The events are all collected but supressed in console. The events are still searchable with related queries in Investigate page.
- More information of this change can be found in:
https://community.carbonblack.com/t5/Console-Release-Notes/tkb-p/release_notes
DSER-29279
Feedback
thumb_up
Yes
thumb_down
No