Carbon Black Cloud: Can Support Export Alert or Event data on Admin's behalf?
book
Article ID: 291404
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Can Support Export Alert or Event data on Admin's behalf?
Environment
Carbon Black Cloud Console: All Versions
- Endpoint Standard (was CB Defense)
- Enterprise EDR (was CB ThreatHunter)
- Audit and Remediation (was CB LiveOps)
- Managed Detection (was CB ThreatSight)
Resolution
- No. Neither Carbon Black Support or Development export alert or event data on a CB Admin's behalf.
- An Administrator of the Carbon Black Cloud org can export event data from their own org if needed.
Additional Information
- It is now currently possible to export events from the Console UI; it is also possible to export using API.
- Please see related links for more details on exporting data
Feedback
thumb_up
Yes
thumb_down
No