CB Defense: User name: information is missing from event details of certain end points.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

When looking into the event details from one end point 'User Name' field is shown whereas the details of an event from another has this field missing.

Environment

• CB Defense 3.x
• Any end point OS

Cause

The end point with the missing 'User Name' information is in a policy which has the 'Enable private logging level' option enabled.

Resolution

Disabling the 'Enable private logging level' policy option should restore the 'User Name' field to event details for end points in that policy.