CBC: The console widget "Prevented Malware" push buttons may pivot to an empty alerts page.
book
Article ID: 290883
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
In the Console Dashboard, clicking on any of the "Prevented Malware" may pivot to an empty Alerts page.
Environment
- CBC Console: All versions
- CBC Sensors: All versions
Cause
This is functioning as designed. The URL alert search is specifying only alerts that are NOT dismissed.
Resolution
If all of the alerts counted in the Prevented Malware widget have been dismissed, then the alerts page will be empty.
Additional Information
- The URL/query included the specification
[workflow][0]=OPEN&s[c]
- To alter this behavior, edit the URL at the top of the alerts page, and remove just this "workflow" clause.
- The Alerts query/search will then return both dismissed and not dismissed alerts.
- Clicking on the star icon to the right will save that query as a favorite.
Feedback
thumb_up
Yes
thumb_down
No