Carbon Black Cloud: Can the API pull information about whether a sensor is online or offline?
book
Article ID: 290130
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Can an API query deteremine whether an enpoint is currently online or not?
Environment
Carbon Black Cloud Console: All Versions
Resolution
No, at this time the Carbon Black Cloud does not have a field to indicate whether an endpoint is online in real time.
When querying endpoint information via the API, the last check in time is provided which will show how long it has been since the device's last check in. This time is reported in millisecond epoch time and will require conversion to be useable.