PSC: Searching for Username on Endpoints page has unexpected results

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Searching for just a username or partial username returns more results than expected
• Results include Sensors with no visible link to the search string

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.5.x.x and Higher

Cause

Searching for a whole/partial name of a user (Ex. 'smith' or 'john') runs as a plain-text search across all fields

Resolution

Use the search terms below to improve search results

Term	Description
loginUserName	Currently logged-in user
email	User who installed the Sensor

Additional Information

• These fields do not always differ, but when they do using the search terms above will help improve the results of searches
• On 3.4.x.x and earlier Sensors for Windows, loginUserName would show either 1) the name of the user who ran the attended installation or 2) the hostname or admin account for an unattended installation