Audit Log missing device_id values for bulk policy change events

Products

• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)

Issue/Introduction

When more than 20 devices are moved into another policy, the audit log event has ZERO device_ids listed in the audit event to identify which machines were moved, thus breaking the audit trail.

Environment

• Carbon Black Cloud Console: Version 1.27 and lower

Cause

Issue is in Bulk Device Audit Logging area where policies are changed for more than 20 devices.

Resolution

Issue was resolved in Carbon Black Cloud backend release version 1.28 in August 2024.