CBC API Connector: three "scan_*" fields always return NULL values.
search cancel

CBC API Connector: three "scan_*" fields always return NULL values.

book

Article ID: 288195

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Running this POST command returns, among others, these three fields: "scan_last_action_time", "scan_last_complete_time" and "scan_status" always with NULL values.
POST https://defense-prod05.conferdeploy.net/appservices/v6/orgs/ABCD1234/devices/_search

 

Environment

  • API connector: V6 devices (all versions)
  • CBC console:   current July, 2020
  • CBC sensors:   All versions

Cause

The three scan_* fields were never implemented. The issue is actually that they should not be returned at all.

Resolution

A general Feature Request CBC-1677, under consideration, will provide Console UI / API fields to show status, dates and other information on individual sensor scans.