Carbon Black Cloud: Sensors unexpectedly moved to group after modifying Criteria to Any

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Many sensors unexpectedly move into a group recently modified to match 'Any' criteria when OS version is also specified

Environment

• Carbon Black Cloud Console: All Versions

Cause

When an Operating System and the 'Any' logic is applied, the group will catch any endpoints that contain the particular operating system or any of the other criteria specified. 

Resolution

In order to filter by specific OS, but meet the other criteria of a group, the second piece of logic must be set to meet 'All' 
 

Additional Information

If a particular OS is set to match All Versions, a logical AND operator will be used with the rest of the criteria regardless of if the other criteria is using 'All' or 'Any'