New Alerts v7 API Missing Data Compared to Old Alerts V6 API

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Prevention
• Carbon Black Cloud Workload
• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)

Issue/Introduction

• Old API call to /appservices/v6/orgs/{org_key}/alerts/_search is returning different results than the new API call to /api/alerts/v7/orgs/{org_key}/alerts/_search.
• Example: category is returned in v6 but not in v7

Environment

• Carbon Black Cloud

Cause

The new V7 API has a different schema

Resolution

This is expected behavior. The response on the legacy v6 API is not the same as our new V7 API. All schema changes are documented in the in the migration guide.