Cb Response: Incorrect Leading Wildcard Warning

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Query alliance_score_abusech=[65 TO *] got leading wildcard warning.

Environment

• Cb Response Server : 6.2.3+

Cause

"=" instead of ":" is used here.

Resolution

Make sure using ":" between the field and the searching value.