CBC: The console widget "Prevented Malware" push buttons may pivot to an empty alerts page.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

In the Console Dashboard, clicking on any of the "Prevented Malware" may pivot to an empty Alerts page. 

Environment

• CBC Console: All versions
• CBC Sensors: All versions

Cause

This is functioning as designed. The URL alert search is specifying only alerts that are NOT dismissed. 

Resolution

If all of the alerts counted in the Prevented Malware widget have been dismissed, then the alerts page will be empty.
 

Additional Information

• The URL/query included the specification 

[workflow][0]=OPEN&s[c]

• To alter this behavior, edit the URL at the top of the alerts page, and remove just this "workflow" clause.
• The Alerts query/search will then return both dismissed and not dismissed alerts.
• Clicking on the star icon to the right will save that query as a favorite.