EDR: Unable to Rename Investigation
search cancel

EDR: Unable to Rename Investigation

book

Article ID: 291141

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Renaming an Investigation throws an Exception error

Environment

  • EDR Server: 7.8.0
  • Linux: All Supported Versions

Cause

After adding events to an Investigation the rename process is looking for fields that are not present

Resolution

Currently no solutions are available for this issue. It has been reported to Carbon Black engineering