CB Response: Watchlist query missing when generated from a feed
book
Article ID: 290602
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
- Watchlists created from a Threat Intelligcene Feed have a query of cb.urlver=1
- Error in job-runner logs
Environment
- CB Response Server: 6.2.3
- Linux: All Supported Versions
Cause
This is due to a know issue, CB-20781
Resolution
Upgrade to CB Response Server 6.2.4 or higher
Additional Information
Threat Intelligence Feed results can still be added to manually created watchlists
Feedback
thumb_up
Yes
thumb_down
No