Carbon Black Cloud: The Network Tab in The Enriched Events Shows No Records or Events for Linux Devices

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

The Network tab in the Enriched Events shows no records/events for Linux machines however, the Events, Applications, and Devices tab shows records as usual in the Investigate page.

Environment

• Carbon Black Cloud Backend: All supported versions
• Linux: All supported versions

Cause

This is working as expected.

Resolution

The Networks tab is part of the Endpoint Standard feature/product (Analytics Enriched Events) and at the moment the Linux sensor doesn't collect network connection events for Endpoint Standard.

Additional Information

For a full list of feature parity in the Sensor across all major OS, please refer to the Carbon Black Cloud Sensor Feature Matrix.