CB Response: Retention Config In Sensor Group Reverts To Prior Setting After Several Minutes

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Any change made to the retention config in the sensor group settings reverts back to its prior config within 5 minutes of change.

Environment

• CB Response Server: 6.5.2 and Higher

Cause

Third party script being run on instance causing settings to revert.

Resolution

• Determine whether script requires running on instance, disable if not needed.
• Work with script vendor to determine whether script can be temporarily disabled to allow a settings change.