CB Response: How To Pull All Custom Watchlists from Postgres

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to pull all custom watchlists from Postgres?

Environment

• CB Response Server: All versions

Resolution

At Response server/master, run:
 

psql -d cb -p 5002 -c "select * from watchlist_entries where group_id='-1';"