Cb Response: Error "Too Many Reports" when trying to bulk ignore threat reports
book
Article ID: 288139
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Error "Too Many Reports" when trying to bulk ignore threat reports
Cause
MaxRowsSolrReportQuery is set to 10000 by default and and the number of reports trying to be cleared exceeds that
Resolution
Add or update MaxRowsSolrReportQuery in the /etc/cb/cb.conf to the desired number of threat reports to be ignored and restart the cb services.
Feedback
thumb_up
Yes
thumb_down
No