EDR: Malformed query syntax creates inaccurate results
search cancel

EDR: Malformed query syntax creates inaccurate results

book

Article ID: 289030

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • WebUI Console does not show the expected results for a query in Process Search page
  • Query takes a long time finish and still has incomplete or unexpected results

Environment

  • EDR Server: All Versions

Cause

Query syntax is malformed and causing a failure when searching the SOLR database

Resolution

Review and adjust the query being run against the best practices from the CB Response Using Guide for SOLR query language.