Processing delay for creating new large asset groups

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Audit and Remediation
• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Container
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Managed Detection (formerly Cb Threatsight)
• Carbon Black Cloud Managed Detection and Response
• Carbon Black Cloud Managed Threat Hunting
• Carbon Black Cloud Workload

Issue/Introduction

Creating a new asset group that can contain thousands of sensors can take a significant amount of time to process in the Carbon Black Cloud console. 

Example: Asset group with 300k+ endpoints can take over 1 hour to process

Environment

• Carbon Black Cloud Console: Current Version (Feb 2025)
• Asset Groups enabled.

Cause

Carbon Black Development team qualified this behavior as 'working as designed'. There is an expectation for a certain delay because in the back end we have to process and reclassify all existing devices.

Resolution

The general recommendation is to avoid this behavior and not create such large groups (or if created to allow for time for processing). Also, customers should avoid making frequent changes that will trigger processing of the entire fleet of endpoints.

Additional Information

There is an internal feature request (DSER-55033) to make improvements in this for the future; however, this work is not yet on the roadmap and its release is TBD.