IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Response: How Are Watchlist Hits Tracked?

CB Response: How Are Watchlist Hits Tracked?

Environment

  • CB Response Server: All Versions
  • Clustered
  • PostGres Database

Question

How are Watchlist hits tracked?

Answer

Running the following command will provide a quick overview of the 'last_hit' and 'total_hits' for each watchlist: 
psql -d cb -p 5002 -c "select name, index_type, last_hit, last_hit_count, search_timestamp, total_hits from watchlist_entries"

 

Additional Notes

  • In Cluster environment command should be run on Master server.
  • Running the following query will contain the full contents of the 'watchlist_entries' table:
    psql -d cb -p 5002 -c "select * from watchlist_entries"

     

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
407
Contributors