IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Carbon Black Cloud: Grouped Alerts are sorted by First Seen date of the first instance

Carbon Black Cloud: Grouped Alerts are sorted by First Seen date of the first instance

Environment

  • Carbon Black Cloud Console: All Supported Versions
    • Endpoint Standard (Formerly CB Defense)
    • Enterprise EDR (Formerly CB ThreatHunter)

Symptoms

Recent Alerts do not impact the Sort Order when "Group Alerts" is toggled on the Alerts Page

Cause

The default search is sorted by the "First Seen" date of the threat_id, which is used to Group Alerts

Resolution

Untoggle "Group Alerts" to ensure that you see the latest instances of Alerts

Additional Notes

A future UI Enhancement will correct this behavior.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-16-2021
Views:
499
Contributors