Enterprise EDR: How Much Event Data Is Stored When the Sensor Is Offline?
book
Article ID: 288289
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
If the sensor is disconnected, how much event data will be retained?
Environment
- Enterprise EDR: All Supported Versions
Resolution
- Windows: 1 GB
- Linux: 1 GB
- Mac: 500 MB
Additional Information
Once the cap is met oldest event batches will be deleted automatically to keep under the ache limit
Feedback
thumb_up
Yes
thumb_down
No