EDR: Malformed query syntax creates inaccurate results
book
Article ID: 289030
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
- WebUI Console does not show the expected results for a query in Process Search page
- Query takes a long time finish and still has incomplete or unexpected results
Cause
Query syntax is malformed and causing a failure when searching the SOLR database
Resolution
Review and adjust the query being run against the best practices from the CB Response Using Guide for SOLR query language.
Feedback
thumb_up
Yes
thumb_down
No