Enterprise EDR: How Much Event Data Is Stored When the Sensor Is Offline?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

If the sensor is disconnected, how much event data will be retained?

Environment

• Enterprise EDR: All Supported Versions

Resolution

• Windows: 1 GB
• Linux: 1 GB
• Mac: 500 MB

Additional Information

Once the cap is met oldest event batches will be deleted automatically to keep under the ache limit