Carbon Black Cloud: Why are Enriched Events Missing on RHEL 8 devices?
search cancel

Carbon Black Cloud: Why are Enriched Events Missing on RHEL 8 devices?

book

Article ID: 288348

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Why are enriched events missing on RHEL 8 devices?

Environment

  • Carbon Black Cloud Console: All Versions
    • Enterprise EDR
    • Endpoint Standard

Resolution

Enriched events come from the Endpoint Standard data stream. At the current time (sensor 2.10.1) RHEL 8 is only supported for Enterprise EDR and Audit & Remediation. A future release will be adding this functionality.