EDR: UI Goes to Blank Page When Attempting to Enter Query into Watchlist Page

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• When editing or creating a new watchlist on the Watchlists page, the UI gives a blank screen when attempting to copy and paste query into UI:
  • 

Environment

• EDR Server: 7.6.x

Cause

• This appears to be an issue with input validation, specifically when copying and pasting specific queries into the watchlist query input field that include '%'.  A related KB can be found in the 'Related Content' section below.

Resolution

• To work around this issue, a new watchlist can be created from the Process Search page.  First run the query we wish to add as a watchlist, then use the 'Create Watchlist' button to create the watchlist.
• If it's necessary to edit an existing watchlist, please remove the watchlist from the Watchlists page, then use the guidance above to create a new watchlist with the changes that are required.
• This item is currently being investigated by Engineering and will be remedied in an upcoming release.