Communication Key Overuse Alert for More Agents Than Expected

Products

• Carbon Black App Control

Issue/Introduction

• Alerts triggered for Communication Key Overuse referencing more Agents using the Communication Key than expected.
  • In some instances, this could include more than 100% of Total Computers, example:

    120% of connected agents are using the communication key (14,440/12,034)

• Filtering Assets > Computers on Using Communication Key > Yes shows a smaller number actively using the Communication Key

Environment

• App Control Server: 8.11.0+

Cause

Logic in the Scheduled Task is not properly filtering for only Agents that are actively Connected.

Resolution

This issue is being tracked under EPCB-24393 and will be resolved with a future release of the Server. In the meantime the Alert can be ignored if the Using Communication Key Filter in Assets > Computers shows the total below threshold desired (ex: 10%).

Additional Information

• Troubleshooting Communication Key Overuse