Carbon Black Cloud: "Error sending query: Unable to find policy" Error when attempting Live Query

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Error is seen when attempting to create a new Live Query targeting a specific policy:

Error sending query: Unable to find policy

• Live Query can be created against all endpoints/all policies or an individual sensor without issue.

Environment

• Carbon Black Cloud Console: All Supported Versions

Cause

Caused by a backend change that did not allow policy access in certain situations.

Resolution

The engineering team has resolved the issue and it is fixed with an update on October 7th, 2022.

Additional Information

Any observations of this behavior should be logged as a support ticket. Please provide screenshots of the errors encountered along with a HAR Capture.