Carbon Black Cloud: Unable to search on "Parent_Cmdline" field

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Unable to search on Parent_Cmdline field. For example, even though there is a parent process name of "svchost" and it contains the string "Schedule" in it's command line, this process search will NOT return the process:

parent_name:svchost.exe AND parent_cmdline:Schedule

Environment

• Carbon Black Cloud Console
• Carbon Black Cloud Sensors: All versions

Cause

This is issue DSER-31312.

Resolution

DSER-31312 is to be fixed in a future version. (Date reproduced is March, 2021)