Carbon Black Cloud: What Does "Data for this process may have expired or been suppressed due to a lack of events" Mean?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Clicking Investigate on alert yields the error "Data for this process may have expired or been suppressed due to a lack of events". What does this mean?

Environment

• Carbon Black Cloud Console: All Versions

Resolution

This indicates that the events backing the alert are outside of the retention window.