Carbon Black Cloud: Can Support Export Alert or Event data on Admin's behalf?
search cancel

Carbon Black Cloud: Can Support Export Alert or Event data on Admin's behalf?

book

Article ID: 291404

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Can Support Export Alert or Event data on Admin's behalf?

Environment

Carbon Black Cloud Console: All Versions
  • Endpoint Standard (was CB Defense)
  • Enterprise EDR (was CB ThreatHunter)
  • Audit and Remediation (was CB LiveOps)
  • Managed Detection (was CB ThreatSight)

Resolution

  • No. Neither Carbon Black Support or Development export alert or event data on a CB Admin's behalf.
  • An Administrator of the Carbon Black Cloud org can export event data from their own org if needed.

Additional Information

  • It is now currently possible to export events from the Console UI; it is also possible to export using API. 
  • Please see related links for more details on exporting data