Seeing Audit Log Entries With FC7C110817 As the User

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

When making modifications to policies there are multiple audit log entries including one with FC7C110817 as the user

Environment

• Carbon Black Cloud Console: All Supported Versions

Cause

This is GUI issue causing the Policy API ID to show up in the Audit log and is a known issue being monitored via CBC-43931 

Resolution

• This behavior can be ignored as the User is a Global API ID and the users listed in the audit logs around it are the actual users who modified the policy
• This will eventually be modified so that this Audit log entry doesn't appear with that User