EDR Server: Automatically Filter Inactive Sensors from the User Interface (7.2 and Above)

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Filter out inactive sensors that haven't checked in for a certain amount of time

Environment

• EDR Server: 7.2.0 and Above

Resolution

1. Log into the EDR Console
2. Go to the Sensors page
3. Select the "Sensor Display Settings" button
4. Change the value to the maximum number of days sensors should be visible after going offline

Additional Information

• Ensure the SensorLookupInactiveFilterDays value established matches the data retention period configured for the environment
• When an inactive sensor is filtered, any remaining associated event data for that sensor will no longer be accessible via the user interface