Carbon Black Cloud: Why Do Filters Have More Options When Searching on the Filter Criteria?
book
Article ID: 287087
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Why are the results in the 'Filters' pane different when browsing data opposed to searching using the same filter criteria?
Environment
- Carbon Black Cloud Web Console: All Versions (formerly Predictive Security Cloud or PSC)
- Endpoint Standard (formerly CB Defense)
- Enterprise EDR (formerly CB ThreatHunter)
- Audit & Remediation (formerly CB LiveOps)
Resolution
- When browsing data, the 'Filters' pane will only show data from the currently displayed events.
- When searching on the main filter criteria, the filters pane will display data from all generated events.
- One results is a global search while the other is a limited search.
Feedback
thumb_up
Yes
thumb_down
No