Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response: Does the "Block Searches with Leading Wildcard" also affect API queries and Unified View searches?

CB Response: Does the "Block Searches with Leading Wildcard" also affect API queries and Unified View searches?

Environment

  • CB Response Server: 6.4.0 and Higher
  • CB Unfied View Server: 6.3.0

Question

Does the "Block Searches with Leading Wildcard" user permission option affect API queries and Unified View searches?

Answer

Yes. Search and syntax improvements to the 6.4.0 CB Response Server version now prevent leading wildcard searches from API queries, like those sent from the Unfied View server.

Additional Notes

  • "Block Searches with Leading Wildcard" is part of an effort to include safe guards against poor or expensive queries on the clusters. Disabling the setting could have adverse affects on performance. 
  • Workaround:
  1. Click on the username on the right top corner
  2. Click on Settings
  3. Click on Advanced Setting
  4. Uncheck the box for  "Block Searches with Leading Wildcard"

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
258
Contributors