CB Response: "Invalid format string" Error on Process Search on Splunk add-on

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When doing process search Splunk add-on returns "Invalid format string" Error.

Environment

• CB Response Server: All versions
• Splunk: Windows-based, all versions

Cause

Bug CB-27221

Resolution

This will be fixed on a feature release.

Additional Information

The bug is on processing the query result that is returned by Response server.