Carbon Black Cloud: Why are Enriched Events Missing on RHEL 8 devices?
book
Article ID: 288348
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Why are enriched events missing on RHEL 8 devices?
Environment
Carbon Black Cloud Console: All Versions
Enterprise EDR
Endpoint Standard
Resolution
Enriched events come from the Endpoint Standard data stream. At the current time (sensor 2.10.1) RHEL 8 is only supported for Enterprise EDR and Audit & Remediation. A future release will be adding this functionality.