IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Defense: Why do Console Events show out of order near startup times or waking from sleep mode?

CB Defense: Why do Console Events show out of order near startup times or waking from sleep mode?

Environment

  • CB Defense PSC Console: All Versions
  • CB Defense Sensor: All Versions
  • Microsoft Windows: All Versions

Question

Why do Console Events show out of order near startup times or waking from sleep mode?

Answer

As the Device is starting Services and Applications the CB Defense Sensor prioritizes Policy enforcement over logging so time stamps may be incorrectly shown

Additional Notes

  • As Services start there may be Events logged before the Sensor can enforce Policy
  • To avoid performance impact these Events may be delayed for upload
  • May show Events with timestamps during time Policy changes are being applied causing both Policies to be reported for the Event

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
301
Contributors