EDR: What is the default time between "watchlist_search" executions?
search cancel

EDR: What is the default time between "watchlist_search" executions?

book

Article ID: 289027

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What is the default time between "'watchlist_search" task executions via the cron job?

Environment

  • EDR Server: All Versions

Resolution

The default time is 10 minutes between each new "watchlist_search" task execution.

Additional Information

The cron job for the watchlist_search can be found in theĀ /etc/cron.d/cb file
*/10 * * * * cb /usr/share/cb/virtualenv/bin/python -m cb.maintenance.job_runner --master -s watchlist_search >> /var/log/cb/job-runner/startup.out 2>&1