App Control: Process Name Missing From Events of Linux Agent

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Process Name column empty for some Events reported from Linux Agent.

Environment

• App Control Agent: 8.7.6 and Below
• Linux: All Supported Versions

Cause

• There are two events generated for every allow or block action from notifier prompt. One of the event generated is missing Process Name.

Resolution

Issue to be address in Linux Agent version 8.8.2. 

Additional Information

• Known Issues in Linux Agent Release Notes 
• EP-14575: When an unapproved file is executed and user clicks “block” on “unapproved file” pop-up, two events are generated and sent to console. The process name is missing on one of those two events. The other event displays the process name and all respective information correctly.