App Control: How to Create an Alert for Automatic Log Capture

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To create an Alert for when Agent Logs have uploaded, such as after an Automatic Log Capture.

Environment

• App Control Console: All Supported Versions
• App Control Agent: All Supported Versions

Resolution

1. Log in to the Console and navigate to Tools > Alerts > Add Alert.
2. Use the following information:
   • Alert Name: Agent Logs Available (or something memorable)
   • Status: Enabled
   • Type: Event Alert
   • Event Properties:
     • Subtype > is: Agent diagnostics available
     • Source > is: relevant Computer
3. Click Create.
4. Add Subscriber Email Address if desired.
5. Click Save.

Additional Information

• This can be beneficial when Automatic Log Capture has been configured.
• The Filter Policy could be used instead of Source, depending on the scenario.