CB Response: Searches with modloads timeout

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Queries searching multiple fields including at least one modload time out during search
• Similar queries without modloads return data

Environment

• CB Response Sever: 6.2.1 - 6.2.4

Cause

Performance issues occur nested queries containing modloads - CB-14781

Resolution

Upgrade to version 6.3.0 or higher