App Control: How to Identify the Length of time an Agent has Been in a Policy

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Identify how long an agent has been in a specific policy

Environment

• App Control Server: All Supported Versions

Resolution

1. Navigate to 'Reports' > 'Events'
2. Show filter and choose the following type and subtypes
   1. type: "computer management"
   2. subtype: "computer modified"/ "agent policy change" / "Agent Enforcement Level changed"
3. Apply this filter
4. Set the 'Max age' to the appropriate timeline