EDR: How to Increase LiveQuery Timeout
search cancel

EDR: How to Increase LiveQuery Timeout

book

Article ID: 287436

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • How to increase the LiveQuery Timeout.

Environment

  • EDR Server: Versions 7.2.0+

Resolution

  • Timeout can be increased by adding the following DWORD in HKLM\Software\CarbonBlack\Config of the endpoints being queried: OsqueryTimeoutOverrideMinutes
  • The OsqueryTimeoutOverrideMinutes is in minutes: 10 = 10 minutes
Powered by Wolken Software