Carbon Black Cloud: Why Do Filters Have More Options When Searching on the Filter Criteria?
search cancel

Carbon Black Cloud: Why Do Filters Have More Options When Searching on the Filter Criteria?

book

Article ID: 287087

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Why are the results in the 'Filters' pane different when browsing data opposed to searching using the same filter criteria? 
 

Environment

  • Carbon Black Cloud Web Console: All Versions (formerly Predictive Security Cloud or PSC)
    • Endpoint Standard (formerly CB Defense)
    • Enterprise EDR (formerly CB ThreatHunter)
    • Audit & Remediation (formerly CB LiveOps)

Resolution

  • When browsing data, the 'Filters' pane will only show data from the currently displayed events.
  • When searching on the main filter criteria, the filters pane will display data from all generated events. 
  • One results is a global search while the other is a limited search.