CB Response Cloud: How Long are Events Stored on a CB-Hosted S3 Bucket?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How long are events stored on an AWS S3 bucket hosted by Carbon Black?

Environment

• CB Response Cloud: All Versions
• Hosted AWS S3 Bucket: All Versions

Resolution

A Carbon Black-hosted AWS S3 bucket is able to retain events up to 7 days.

Additional Information

• Once events pass 7 days of retention they are purged according to the oldest event.
• As of 7/12/2020 VMware Carbon Black no longer provides an S3 Bucket for new setups https://community.carbonblack.com/t5/Hosted-EDR-Discussions/Carbon-Black-Hosted-EDR-Event-Forwarder-UI-Enablement/td-p/91968