Carbon Black Cloud: Why are Enriched Events Missing on RHEL 8 devices?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Why are enriched events missing on RHEL 8 devices?

Environment

• Carbon Black Cloud Console: All Versions
  • Enterprise EDR
  • Endpoint Standard

Resolution

Enriched events come from the Endpoint Standard data stream. At the current time (sensor 2.10.1) RHEL 8 is only supported for Enterprise EDR and Audit & Remediation. A future release will be adding this functionality.