Cb Response: Cb Response not logging all administrator changes in the Web UI
search cancel

Cb Response: Cb Response not logging all administrator changes in the Web UI

book

Article ID: 288232

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Not all administrator changes in the UI are sent to audit logs

Environment

  • Cb Response Server: 6.x and Higher

Cause

  • Current audit logs limited in scope of administrator changes by design

Resolution

  1. Community members that would like to see this feature can vote here: https://community.carbonblack.com/ideas/1881

Additional Information

  • Sample actions to be logged:
    • Creating a Sensor group
    • Altering throttling settings for a site
    • diting a watchlist
  • See Page 57 of the Cb Response Users Guide on Audit logs