CB Response: Is there a way to change the "Retention Maximization" Sensor Group setting from the API?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is there a way to change the "Retention Maximization" Sensor Group setting from the API?

Environment

• CB Response Server: 7.x and Higher
• API access

Resolution

Yes. You can adjust the "proces_filter_level", which is defaulted to 1 (Recommended). It has 3 settings: 0 (Minimum Retention), 1 (Recommended Retention) and 2 (Maximum Retention).