Enterprise EDR: How Much Event Data Is Stored When the Sensor Is Offline?
search cancel

Enterprise EDR: How Much Event Data Is Stored When the Sensor Is Offline?

book

Article ID: 288289

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

If the sensor is disconnected, how much event data will be retained?

Environment

  • Enterprise EDR: All Supported Versions

Resolution

  • Windows:¬†1 GB
  • Linux: 1 GB
  • Mac: 500 MB

Additional Information

Once the cap is met oldest event batches will be deleted automatically to keep under the ache limit