Cb Response: Cb Response not logging all administrator changes in the Web UI

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Not all administrator changes in the UI are sent to audit logs

Environment

• Cb Response Server: 6.x and Higher

Cause

• Current audit logs limited in scope of administrator changes by design

Resolution

1. Community members that would like to see this feature can vote here: https://community.carbonblack.com/ideas/1881

Additional Information

• Sample actions to be logged:
  • Creating a Sensor group
  • Altering throttling settings for a site
  • diting a watchlist
• See Page 57 of the Cb Response Users Guide on Audit logs