Carbon Black Cloud: Sensor Grouping by Device Host Name Criteria Fails

Products

• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Device names where used as part of sensor grouping criteria

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.1.x.x and Higher
• Microsoft Windows: All Supported Versions

 

Cause

Known issue, in addition, grouping by device host names is case sensitive

Resolution

• Upgrade to the 3.6.0.1941 sensor as it includes code improvement related to automatic group assignment
• Device host name matches the device name shown in the console (upper/lower case)
• Ensure the endpoint has been set to "Automatic assignment" rather than "Manual assignment"