Event Backlog with OER Compliant Server with Antivirus Installed

Products

• Carbon Black EDR

Issue/Introduction

Backlog is seen with an OER compliant server is experiencing backlog with an Antivirus installed. 

Environment

• Carbon Black EDR Server: All Versions

Cause

Antivirus is installed without exclusions. 

Resolution

Add AV Exclusions to ignore the data directories for the EDR server. AV Exclusion Directories for the EDR Server

Additional Information

Antivirus can interfere with the performance and potentially cause corruption on the writes of Solr and Postgres database