Carbon Black Cloud: Multiple Emails for the Same Threat Type / Watchlist Hit

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Multiple emails being received for the same threat type / watchlist hit

Environment

• Carbon Black Cloud Console

Cause

The setting "Send only 1 email notification for each threat type per day" is not enabled

Resolution

1. Navigate to Settings > Notifications > Edit.
2. Select "Send only 1 email notification for each threat type per day" under the notification

Additional Information

There is curently no rate limit on the notification system. For each match an email will be sent, regardless of how many there are.