CB Response: Cannot Delete Ingress Filter - Status Code 500

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Delete request sent to server returns exception 

  • StatusCode: 500
    StatusDescription: INTERNAL SERVER ERROR​​

• Filter name in request does not match case of actual filter name

Environment

• CB Response Server: 6.x
• Microsoft Windows Powershell

Cause

Delete requests for filters are case sensitive

Resolution

Adjust the request so the filter name case matches

Additional Information

• To view the status code and description of a request exception, use a try catch block

  • try { Invoke-RestMethod -URI "<server_url>/api/v1/ingress_whitelist/Fc-Filter2" -Method DELETE -Headers @{"X-Auth-Token"="<user_token>"} -Verbose
    } catch {
    Write-Host "StatusCode:" $_.Exception.Response.StatusCode.value__
    Write-Host "StatusDescription:" $_.Exception.Response.StatusDescription
    }

• To view a list of current filters

  • Invoke-RestMethod -URI https://cbio-ftw.my.carbonblack.io/api/v1/ingress_whitelist -Method GET -Headers @{"X-Auth-Token"="69c7c7867691c136823bac46e55f782a4aaa1390"}