EDR: Malformed query syntax creates inaccurate results

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• WebUI Console does not show the expected results for a query in Process Search page
• Query takes a long time finish and still has incomplete or unexpected results

Environment

• EDR Server: All Versions

Cause

Query syntax is malformed and causing a failure when searching the SOLR database

Resolution

Review and adjust the query being run against the best practices from the CB Response Using Guide for SOLR query language.