Carbon Black Cloud: What Does "Data for this process may have expired or been suppressed due to a lack of events" Mean?
book
Article ID: 288384
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Clicking Investigate on alert yields the error "Data for this process may have expired or been suppressed due to a lack of events". What does this mean?
Environment
Carbon Black Cloud Console: All Versions
Resolution
This indicates that the events backing the alert are outside of the retention window.