EDR: Creating a Watchlist from Binary Search add Criteria will use AND instead of OR

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When creating a watchlist from the Binary search page using the add criteria when it has multiple options will us AND instead of OR

Environment

• EDR Console: 7.4.1

Cause

Change in the UI code adjusted the watchlist creation

Resolution

• Issue is being resolved in CB-34976
• At this time no eta on expected fix version. Please subscribe to this article for updates
• To workaround the issue, please replace the AND with OR when selecting "Create Watchlist" to get alerts as expected.