EDR: Feed Query is not Alerting
book
Article ID: 287881
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Carbon Black Hosted EDR (formerly Cb Response Cloud)
Issue/Introduction
A custom feed is created using a query and no alerts are seen
Environment
- EDR Server: All Versions
- CbFeeds
Cause
Query in feed report is not URL encoded
Resolution
Update the report in the feed json file with URL encoding on the search_query section.
Feedback
thumb_up
Yes
thumb_down
No