Find Devices With ManifestDownloadFailure or ContentDownloadFailure Alarms

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Obtain a full list of devices sending ManifestDownloadFailure (macOS, Windows) or ContentDownloadFailure (Linux) alarms

Environment

• Carbon Black Cloud Sensor: All Supported Versions
• Carbon Black Cloud Sensor: All Supported Versions
• Carbon Black Cloud Sensor: All Supported Versions
• Linux: All Supported Versions
• macOS: All Supported Versions
• Windows: All Supported Versions

Resolution

Option 1:

Use the "Sensor Manifest Download Errors" query in the Sensor Analysis category. Note This option only works for Windows Sensors on v3.8.x.x and higher.

1. Navigate to Live Query > New Query
2. Click "Sensor Analysis"
3. Search for "sensor manifest download errors"
4. Click "Run"next to the query

Option 2

If a list of macOS and Linux devices are needed, open a Technical Support Case.