Access official resources from Carbon Black experts
Advanced Search
IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!
Carbon Black Cloud: Error 500 if "Dismiss future instances of this alert on all devices in all policies" used
Environment
Carbon Black Cloud Console: All Versions
Symptoms
Observing Error 500 if "Dismiss future instances of this alert on all devices in all policies" is used to dismiss alert
Alert is never dismissed
Cause
The Alert Dismissal request is an async process and may be first be "QUEUED", before the dismissal later goes through
This issue can happen when the Alert Dismissal requests build up and the CBC gets behind on the bulk dismissal processing queue
Resolution
VMware Carbon Black is working to ensure that alert dismissal queue remains clear to reduce potential delay in Alert Dismissals; However, should this issue be observed again in the future please Create a Support Case with the following information so we can investigate the issue further:
Har File collected when attempting to dismiss alert
Alert ID(s) which failed to dismiss
Screenshot of the Error Message
In the future, improvements will be made to ensure that dismissal requests are logged in the Audit Log at the time of the request, so that repeated Alert Dismissal requests for the same Alert ID are not made
