Sensor queue size limits

Products

• Carbon Black Cloud Enterprise EDR
• Carbon Black Cloud Endpoint Standard

Issue/Introduction

What are the disk queue size limits for the Carbon Black Cloud sensors?

Environment

• Carbon Black Cloud Enterprise EDR
• Microsoft Windows: all supported versions
• macOS: all supported versions
• Linux: : all supported versions

Resolution

• Windows queue limit: 2 GB 
• macOS queue limit: 500 MB
• Linux queue limit: 1 GB

Additional Information

Once these limits are reached, the oldest events will be dropped first to make room for the latest. (FIFO)