Alerts triggered with severity score 0
search cancel

Alerts triggered with severity score 0

book

Article ID: 286348

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard

Issue/Introduction

  • Alert notification is received if some API is configured
  • Alert is not visible on the "Alert Triage" page.
  • The alert is found as dismissed when investigating the audit logs:
    alert_id:b64xxxxd8c-426a-4088-xxxxx-xxxxxx-xxxxxx
    ---------------------------------------------------------------------
    Date
    DeviceID
    Alert xxxxxxxxxxxxxxxx dismissed on device xxxxxxx. Dismissal reason marked as xxxxxxxxxxxx
  • The alerts are visible on the "Investigate" page with a severity 0

Environment

  • Carbon Black Cloud Console: All supported versions

Cause

The cause of the issue could be due to a new policy segment download.

Resolution

This is likely a one time occurrence; however, if issue re-occurs open a case with Carbon Black Support and provide the AlertID and sensor logs.