CB Response: How to purge data from the Endpoint Hygiene graph

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To purge unwanted legacy data from the Endpoint Hygiene graph, located in the CB Response web interface. 

Environment

• CB Response: 6.x

Resolution

1. Open a command line terminal to the CB Response master server.
2. Connect to the Postgres database:

# psql cb -p 5002

3. Run the purge command:

delete from detect_dashboard_host_hygiene_history * where time_stamp < '<DATE>'::date;

Where "<DATE>" is in the YY-MM-DD format.  Example:

delete from detect_dashboard_host_hygiene_history * where time_stamp < '2017-12-01'::date;

 

Additional Information

• The date provided represents the date of the oldest data to remain visible in the Endpoint Hygiene graph.
• Purging this data will have no effect or impact on existing event or binary data. 
• CB Response Cloud users should open a case with Carbon Black Technical Support to complete this task.