EDR: Feed Query is not Alerting
search cancel

EDR: Feed Query is not Alerting

book

Article ID: 287881

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response) Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

A custom feed is created using a query and no alerts are seen

Environment

  • EDR Server: All Versions
  • CbFeeds

Cause

Query in feed report is not URL encoded

Resolution

Update the report in the feed json file with URL encoding on the search_query section.