Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Environment

CBC Console: All versions
CBC Sensors: All versions

Symptoms

Any query returns the same number of events whether or not the field "netconns_failed:" field is included in the query.

Cause

The feature flag "Enterprise EDR" is not enabled.

Resolution

"netconn_failed" field requires the EEDR feature.

Knowledge Base

CBC: Searching for events using the netconn_failed field does not work.

CBC: Searching for events using the netconn_failed field does not work.

Environment

Symptoms

Cause

Resolution

Related Content

Audit and Remediation

Carbon Black Cloud

Container

Endpoint Standard

Enterprise EDR

Managed Detection

Managed Detection and Response

Prevention

Workload

Knowledge Base

CBC: Searching for events using the netconn_failed field does not work.

CBC: Searching for events using the netconn_failed field does not work.

Environment

Symptoms

Cause

Resolution

Related Content

Thank you for your feedback.

Thank you for your feedback.