EDR: What Are the Live Query Limitations?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What are the Live Query Limitations?

Environment

• EDR Server: All Supported Versions

Resolution

• Only 200 sensors can be selected at a time for a query
• Only one query can run at a time
• Live Query is only supported on Windows at this time

Additional Information

• These limitations are mentioned in the "Create and Run a Query" section of the User Guide
• These limitations are subject to change as the Live Query feature is still in beta