EDR: CBstats AttributeError: 'QueryNetworkIO' object has no attribute 'get_sub_topic'

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When starting cbstats with NetworkIO.* enabled, the following error is displayed

AttributeError: 'QueryNetworkIO' object has no attribute 'get_sub_topic'

Environment

• EDR: All Versions

Cause

One of the network adapters has a naming convention with a period or underscore such as mync.01

Resolution

Workarounds

Option 1: Change the network adapter naming to not include a period or underscore
Option 2: In the cbstats.conf, specify the network adapters you need that are related to the application 
Option3: Disable NetworkIO.* in cbstats.conf and wait for CB-37023

Additional Information

The code uses underscores and periods to split the metric and determine if there is a subtopic. When this is included in the naming convention, the second part of the name is considered a subtopic in which this type does not have subtopics